{
  "document" : {
    "aggregate_severity" : {
      "namespace" : "https://access.redhat.com/security/updates/classification/",
      "text" : "Critical"
    },
    "category" : "csaf_security_advisory",
    "csaf_version" : "2.0",
    "distribution" : {
      "text" : "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "en",
    "notes" : [ {
      "category" : "summary",
      "text" : "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
      "title" : "Topic"
    }, {
      "category" : "general",
      "text" : "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)\n\n* chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)\n\n* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)\n\n* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)\n\n* chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)\n\n* chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-3909)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-4464)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-4452)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-4448)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)\n\n* chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-5283)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-5275)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-5277)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-5868)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-6296)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7340)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-7359)\n\n* chromium-browser: angle: Out of bounds read and write in Angle (CVE-2026-7354)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-7901)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7903)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-7900)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)\n\n* chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)\n\n* chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)\n\n* chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-8556)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)\n\n* chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-8567)\n\n* chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-8519)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9915)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9928)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9932)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9904)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-10018)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9879)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9899)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9940)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9925)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9965)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9926)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9877)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9927)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9946)\n\n* chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9999)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9882)\n\n* chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-9910)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9908)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9924)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9944)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9953)\n\n* chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-9975)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9982)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9914)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9941)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-10019)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9878)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9901)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9900)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9969)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9935)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9911)\n\n* chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9913)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-9942)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892)\n\n* chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-9916)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-11113)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10889)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-10994)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993)\n\n* chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-11088)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-10919)\n\n* chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-10999)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11111)\n\n* chromium-browser: angle: Type Confusion in ANGLE (CVE-2026-10955)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-10974)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11104)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11087)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159)\n\n* chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-11191)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-11055)\n\n* chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-10881)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10930)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11005)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-10907)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11004)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-11040)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-10929)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-10913)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11090)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11268)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-11044)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-11065)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-10977)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-10883)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11110)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-11043)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11123)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-10925)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11109)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-10914)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11138)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11051)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11061)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-10979)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-11137)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-11066)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia (CVE-2026-10941)\n\n* chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia (CVE-2026-11099)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-11663)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11675)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-14044)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13780)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-13841)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-13971)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-13820)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-14125)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-13885)\n\n* chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-13859)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-13781)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-13833)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13834)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-14152)\n\n* chromium-browser: angle: Type Confusion in ANGLE (CVE-2026-13883)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-13877)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-13975)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-13819)\n\n* chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-14400)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14414)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14389)\n\n* chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14396)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14401)\n\n* chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-14385)\n\n* chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14387)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14390)\n\n* chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14388)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-14410)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-14419)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14425)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-14397)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-14398)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14418)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14382)\n\n* chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-14391)\n\n* chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14384)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14402)\n\n* chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14429)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14413)\n\n* chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-14427)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14411)\n\n* chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14386)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14412)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-15109)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-15766)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-15774)\n\n* chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Skia (CVE-2026-16417)\n\n* chromium-browser: angle: Chromium: Sandbox escape via out-of-bounds write in ANGLE (CVE-2026-16413)\n\n* chromium-browser: angle: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access (CVE-2026-16419)\n\n* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-17702)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17832)\n\n* chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17683)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17718)\n\n* chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17721)\n\n* chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17676)\n\n* chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17675)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17757)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17847)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17811)\n\n* chromium-browser: angle: chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-17801)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17667)\n\n* chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia (CVE-2026-17914)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17704)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17750)\n\n* chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17691)\n\n* chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17701)\n\n* chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-17717)\n\n* chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17678)\n\n* chromium-browser: ANGLE: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-17687)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17668)\n\n* chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17695)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-17745)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17740)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17655)\n\n* chromium-browser: skia: chromium-browser: skia: Race in Skia (CVE-2026-17712)\n\n* chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17771)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17790)\n\n* chromium-browser: angle: chromium-browser: Use after free in ANGLE (CVE-2026-17891)\n\n* chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17677)\n\n* chromium-browser: angle: chromium-browser: Integer overflow in ANGLE (CVE-2026-17682)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17671)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17714)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17785)\n\n* chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-17653)\n\n* chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-17697)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17689)\n\n* chromium-browser: skia: chromium-browser: Use after free in Skia (CVE-2026-19154)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-19173)\n\n* chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use (CVE-2026-19161)\n\n* chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android (CVE-2026-19157)\n\n* chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome (CVE-2026-19160)\n\n* chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)\n\n* chromium-browser: skia: chromium-browser: skia: Information leak in Skia (CVE-2026-76041)\n\n* ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page (CVE-2026-76046)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)\n\n* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)\n\n* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)\n\n* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)\n\n* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)\n\n* webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)\n\n* chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-78989)\n\n* ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution via use-after-free vulnerability (CVE-2026-79149)\n\n* chromium-browser: skia: chromium-browser: Out of bounds read in Skia (CVE-2026-79112)\n\n* chromium-browser: angle: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE (CVE-2026-79138)\n\n* chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML (CVE-2026-78905)\n\n* chromium-browser: angle: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource (CVE-2026-79120)\n\n* chromium-browser: angle: Chromium: Information disclosure due to uninitialized resource in ANGLE (CVE-2026-79118)\n\n* chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation (CVE-2026-79230)\n\n* chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page (CVE-2026-78904)\n\n* chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79240)\n\n* chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia (CVE-2026-78914)\n\n* chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome (CVE-2026-79147)\n\n* chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79019)\n\n* chromium-browser: angle: Chromium-browser: Memory disclosure via uninitialized resource in ANGLE (CVE-2026-79270)\n\n* chromium-browser: angle: ANGLE: Arbitrary code execution via use after free (CVE-2026-79275)\n\n* chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-78978)\n\n* chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-78958)\n\n* chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource (CVE-2026-78965)\n\n* chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79188)\n\n* chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page (CVE-2026-79043)\n\n* chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-79282)\n\n* chromium-browser: angle: Chromium: Information disclosure via uninitialized resource in ANGLE (CVE-2026-79229)\n\n* chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE (CVE-2026-79131)\n\n* chromium-browser: angle: Chromium: Web origin policy bypass via uninitialized resource in ANGLE (CVE-2026-79269)\n\n* chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79127)\n\n* chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79189)\n\n* chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page (CVE-2026-79142)\n\n* chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-79048)\n\n* chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource (CVE-2026-79285)\n\n* chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79130)\n\n* chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-79144)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-79020)\n\n* chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via race condition in HTML processing (CVE-2026-78906)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)\n\n* webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65333)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)\n\n* webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)\n\n* webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
      "title" : "Details"
    }, {
      "category" : "legal_disclaimer",
      "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
      "title" : "Terms of Use"
    } ],
    "publisher" : {
      "category" : "vendor",
      "contact_details" : "https://access.redhat.com/security/team/contact/",
      "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name" : "Red Hat Product Security",
      "namespace" : "https://www.redhat.com"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "https://access.redhat.com/errata/RHSA-2026:95403",
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/updates/classification/#critical",
      "url" : "https://access.redhat.com/security/updates/classification/#critical"
    }, {
      "category" : "external",
      "summary" : "2298302",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2298302"
    }, {
      "category" : "external",
      "summary" : "2303272",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2303272"
    }, {
      "category" : "external",
      "summary" : "2307088",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2307088"
    }, {
      "category" : "external",
      "summary" : "2308415",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2308415"
    }, {
      "category" : "external",
      "summary" : "2308417",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2308417"
    }, {
      "category" : "external",
      "summary" : "2311665",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2311665"
    }, {
      "category" : "external",
      "summary" : "2314571",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2314571"
    }, {
      "category" : "external",
      "summary" : "2338161",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2338161"
    }, {
      "category" : "external",
      "summary" : "2343797",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2343797"
    }, {
      "category" : "external",
      "summary" : "2388151",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2388151"
    }, {
      "category" : "external",
      "summary" : "2391109",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2391109"
    }, {
      "category" : "external",
      "summary" : "2397874",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2397874"
    }, {
      "category" : "external",
      "summary" : "2431128",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2431128"
    }, {
      "category" : "external",
      "summary" : "2444613",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2444613"
    }, {
      "category" : "external",
      "summary" : "2444617",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2444617"
    }, {
      "category" : "external",
      "summary" : "2446868",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2446868"
    }, {
      "category" : "external",
      "summary" : "2447195",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2447195"
    }, {
      "category" : "external",
      "summary" : "2449382",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449382"
    }, {
      "category" : "external",
      "summary" : "2449388",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449388"
    }, {
      "category" : "external",
      "summary" : "2449406",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449406"
    }, {
      "category" : "external",
      "summary" : "2449412",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449412"
    }, {
      "category" : "external",
      "summary" : "2453681",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2453681"
    }, {
      "category" : "external",
      "summary" : "2453693",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2453693"
    }, {
      "category" : "external",
      "summary" : "2453696",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2453696"
    }, {
      "category" : "external",
      "summary" : "2456737",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456737"
    }, {
      "category" : "external",
      "summary" : "2456779",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456779"
    }, {
      "category" : "external",
      "summary" : "2456802",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456802"
    }, {
      "category" : "external",
      "summary" : "2458783",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458783"
    }, {
      "category" : "external",
      "summary" : "2458786",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458786"
    }, {
      "category" : "external",
      "summary" : "2458798",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458798"
    }, {
      "category" : "external",
      "summary" : "2463657",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2463657"
    }, {
      "category" : "external",
      "summary" : "2463664",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2463664"
    }, {
      "category" : "external",
      "summary" : "2463670",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2463670"
    }, {
      "category" : "external",
      "summary" : "2463691",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2463691"
    }, {
      "category" : "external",
      "summary" : "2467315",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467315"
    }, {
      "category" : "external",
      "summary" : "2467316",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467316"
    }, {
      "category" : "external",
      "summary" : "2467337",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467337"
    }, {
      "category" : "external",
      "summary" : "2467351",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467351"
    }, {
      "category" : "external",
      "summary" : "2467362",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467362"
    }, {
      "category" : "external",
      "summary" : "2467385",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467385"
    }, {
      "category" : "external",
      "summary" : "2467399",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467399"
    }, {
      "category" : "external",
      "summary" : "2467432",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467432"
    }, {
      "category" : "external",
      "summary" : "2477624",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477624"
    }, {
      "category" : "external",
      "summary" : "2477634",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477634"
    }, {
      "category" : "external",
      "summary" : "2477635",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477635"
    }, {
      "category" : "external",
      "summary" : "2477663",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477663"
    }, {
      "category" : "external",
      "summary" : "2477666",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477666"
    }, {
      "category" : "external",
      "summary" : "2477670",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477670"
    }, {
      "category" : "external",
      "summary" : "2477687",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477687"
    }, {
      "category" : "external",
      "summary" : "2482973",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482973"
    }, {
      "category" : "external",
      "summary" : "2482975",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482975"
    }, {
      "category" : "external",
      "summary" : "2482977",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482977"
    }, {
      "category" : "external",
      "summary" : "2482984",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482984"
    }, {
      "category" : "external",
      "summary" : "2482986",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482986"
    }, {
      "category" : "external",
      "summary" : "2482987",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482987"
    }, {
      "category" : "external",
      "summary" : "2482995",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482995"
    }, {
      "category" : "external",
      "summary" : "2482997",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482997"
    }, {
      "category" : "external",
      "summary" : "2482999",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482999"
    }, {
      "category" : "external",
      "summary" : "2483000",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483000"
    }, {
      "category" : "external",
      "summary" : "2483001",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483001"
    }, {
      "category" : "external",
      "summary" : "2483007",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483007"
    }, {
      "category" : "external",
      "summary" : "2483011",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483011"
    }, {
      "category" : "external",
      "summary" : "2483012",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483012"
    }, {
      "category" : "external",
      "summary" : "2483013",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483013"
    }, {
      "category" : "external",
      "summary" : "2483014",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483014"
    }, {
      "category" : "external",
      "summary" : "2483015",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483015"
    }, {
      "category" : "external",
      "summary" : "2483016",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483016"
    }, {
      "category" : "external",
      "summary" : "2483018",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483018"
    }, {
      "category" : "external",
      "summary" : "2483023",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483023"
    }, {
      "category" : "external",
      "summary" : "2483027",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483027"
    }, {
      "category" : "external",
      "summary" : "2483028",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483028"
    }, {
      "category" : "external",
      "summary" : "2483035",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483035"
    }, {
      "category" : "external",
      "summary" : "2483036",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483036"
    }, {
      "category" : "external",
      "summary" : "2483039",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483039"
    }, {
      "category" : "external",
      "summary" : "2483041",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483041"
    }, {
      "category" : "external",
      "summary" : "2483042",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483042"
    }, {
      "category" : "external",
      "summary" : "2483045",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483045"
    }, {
      "category" : "external",
      "summary" : "2483049",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483049"
    }, {
      "category" : "external",
      "summary" : "2483056",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483056"
    }, {
      "category" : "external",
      "summary" : "2483057",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483057"
    }, {
      "category" : "external",
      "summary" : "2483058",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483058"
    }, {
      "category" : "external",
      "summary" : "2483059",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483059"
    }, {
      "category" : "external",
      "summary" : "2483060",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483060"
    }, {
      "category" : "external",
      "summary" : "2483062",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483062"
    }, {
      "category" : "external",
      "summary" : "2483067",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483067"
    }, {
      "category" : "external",
      "summary" : "2483068",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483068"
    }, {
      "category" : "external",
      "summary" : "2483070",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483070"
    }, {
      "category" : "external",
      "summary" : "2483080",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483080"
    }, {
      "category" : "external",
      "summary" : "2483083",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483083"
    }, {
      "category" : "external",
      "summary" : "2483088",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483088"
    }, {
      "category" : "external",
      "summary" : "2483101",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483101"
    }, {
      "category" : "external",
      "summary" : "2483103",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483103"
    }, {
      "category" : "external",
      "summary" : "2483108",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483108"
    }, {
      "category" : "external",
      "summary" : "2483111",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483111"
    }, {
      "category" : "external",
      "summary" : "2483114",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483114"
    }, {
      "category" : "external",
      "summary" : "2484949",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484949"
    }, {
      "category" : "external",
      "summary" : "2484968",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484968"
    }, {
      "category" : "external",
      "summary" : "2484974",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484974"
    }, {
      "category" : "external",
      "summary" : "2484977",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484977"
    }, {
      "category" : "external",
      "summary" : "2484981",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484981"
    }, {
      "category" : "external",
      "summary" : "2484992",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484992"
    }, {
      "category" : "external",
      "summary" : "2485007",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485007"
    }, {
      "category" : "external",
      "summary" : "2485015",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485015"
    }, {
      "category" : "external",
      "summary" : "2485036",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485036"
    }, {
      "category" : "external",
      "summary" : "2485037",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485037"
    }, {
      "category" : "external",
      "summary" : "2485042",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485042"
    }, {
      "category" : "external",
      "summary" : "2485043",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485043"
    }, {
      "category" : "external",
      "summary" : "2485056",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485056"
    }, {
      "category" : "external",
      "summary" : "2485060",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485060"
    }, {
      "category" : "external",
      "summary" : "2485064",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485064"
    }, {
      "category" : "external",
      "summary" : "2485071",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485071"
    }, {
      "category" : "external",
      "summary" : "2485072",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485072"
    }, {
      "category" : "external",
      "summary" : "2485077",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485077"
    }, {
      "category" : "external",
      "summary" : "2485081",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485081"
    }, {
      "category" : "external",
      "summary" : "2485100",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485100"
    }, {
      "category" : "external",
      "summary" : "2485123",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485123"
    }, {
      "category" : "external",
      "summary" : "2485126",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485126"
    }, {
      "category" : "external",
      "summary" : "2485145",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485145"
    }, {
      "category" : "external",
      "summary" : "2485150",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485150"
    }, {
      "category" : "external",
      "summary" : "2485153",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485153"
    }, {
      "category" : "external",
      "summary" : "2485155",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485155"
    }, {
      "category" : "external",
      "summary" : "2485161",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485161"
    }, {
      "category" : "external",
      "summary" : "2485185",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485185"
    }, {
      "category" : "external",
      "summary" : "2485188",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485188"
    }, {
      "category" : "external",
      "summary" : "2485204",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485204"
    }, {
      "category" : "external",
      "summary" : "2485214",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485214"
    }, {
      "category" : "external",
      "summary" : "2485217",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485217"
    }, {
      "category" : "external",
      "summary" : "2485231",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485231"
    }, {
      "category" : "external",
      "summary" : "2485236",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485236"
    }, {
      "category" : "external",
      "summary" : "2485237",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485237"
    }, {
      "category" : "external",
      "summary" : "2485253",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485253"
    }, {
      "category" : "external",
      "summary" : "2485263",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485263"
    }, {
      "category" : "external",
      "summary" : "2485275",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485275"
    }, {
      "category" : "external",
      "summary" : "2485289",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485289"
    }, {
      "category" : "external",
      "summary" : "2485292",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485292"
    }, {
      "category" : "external",
      "summary" : "2485299",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485299"
    }, {
      "category" : "external",
      "summary" : "2485300",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485300"
    }, {
      "category" : "external",
      "summary" : "2485303",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485303"
    }, {
      "category" : "external",
      "summary" : "2485306",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485306"
    }, {
      "category" : "external",
      "summary" : "2485319",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485319"
    }, {
      "category" : "external",
      "summary" : "2485322",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485322"
    }, {
      "category" : "external",
      "summary" : "2485342",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485342"
    }, {
      "category" : "external",
      "summary" : "2485352",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485352"
    }, {
      "category" : "external",
      "summary" : "2485638",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485638"
    }, {
      "category" : "external",
      "summary" : "2486642",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2486642"
    }, {
      "category" : "external",
      "summary" : "2486644",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2486644"
    }, {
      "category" : "external",
      "summary" : "2495510",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495510"
    }, {
      "category" : "external",
      "summary" : "2495520",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495520"
    }, {
      "category" : "external",
      "summary" : "2495548",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495548"
    }, {
      "category" : "external",
      "summary" : "2495557",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495557"
    }, {
      "category" : "external",
      "summary" : "2495595",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495595"
    }, {
      "category" : "external",
      "summary" : "2495603",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495603"
    }, {
      "category" : "external",
      "summary" : "2495605",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495605"
    }, {
      "category" : "external",
      "summary" : "2495632",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495632"
    }, {
      "category" : "external",
      "summary" : "2495660",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495660"
    }, {
      "category" : "external",
      "summary" : "2495688",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495688"
    }, {
      "category" : "external",
      "summary" : "2495701",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495701"
    }, {
      "category" : "external",
      "summary" : "2495718",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495718"
    }, {
      "category" : "external",
      "summary" : "2495732",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495732"
    }, {
      "category" : "external",
      "summary" : "2495747",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495747"
    }, {
      "category" : "external",
      "summary" : "2495770",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495770"
    }, {
      "category" : "external",
      "summary" : "2495802",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495802"
    }, {
      "category" : "external",
      "summary" : "2496258",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496258"
    }, {
      "category" : "external",
      "summary" : "2496263",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496263"
    }, {
      "category" : "external",
      "summary" : "2496264",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496264"
    }, {
      "category" : "external",
      "summary" : "2496271",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496271"
    }, {
      "category" : "external",
      "summary" : "2496273",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496273"
    }, {
      "category" : "external",
      "summary" : "2496274",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496274"
    }, {
      "category" : "external",
      "summary" : "2496275",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496275"
    }, {
      "category" : "external",
      "summary" : "2496277",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496277"
    }, {
      "category" : "external",
      "summary" : "2496280",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496280"
    }, {
      "category" : "external",
      "summary" : "2496282",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496282"
    }, {
      "category" : "external",
      "summary" : "2496283",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496283"
    }, {
      "category" : "external",
      "summary" : "2496286",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496286"
    }, {
      "category" : "external",
      "summary" : "2496291",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496291"
    }, {
      "category" : "external",
      "summary" : "2496294",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496294"
    }, {
      "category" : "external",
      "summary" : "2496295",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496295"
    }, {
      "category" : "external",
      "summary" : "2496296",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496296"
    }, {
      "category" : "external",
      "summary" : "2496297",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496297"
    }, {
      "category" : "external",
      "summary" : "2496301",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496301"
    }, {
      "category" : "external",
      "summary" : "2496302",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496302"
    }, {
      "category" : "external",
      "summary" : "2496304",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496304"
    }, {
      "category" : "external",
      "summary" : "2496305",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496305"
    }, {
      "category" : "external",
      "summary" : "2496308",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496308"
    }, {
      "category" : "external",
      "summary" : "2496309",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496309"
    }, {
      "category" : "external",
      "summary" : "2496310",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496310"
    }, {
      "category" : "external",
      "summary" : "2496312",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496312"
    }, {
      "category" : "external",
      "summary" : "2498347",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2498347"
    }, {
      "category" : "external",
      "summary" : "2500647",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2500647"
    }, {
      "category" : "external",
      "summary" : "2500689",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2500689"
    }, {
      "category" : "external",
      "summary" : "2505966",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2505966"
    }, {
      "category" : "external",
      "summary" : "2505974",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2505974"
    }, {
      "category" : "external",
      "summary" : "2505976",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2505976"
    }, {
      "category" : "external",
      "summary" : "2508687",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508687"
    }, {
      "category" : "external",
      "summary" : "2508694",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508694"
    }, {
      "category" : "external",
      "summary" : "2508701",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508701"
    }, {
      "category" : "external",
      "summary" : "2508707",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508707"
    }, {
      "category" : "external",
      "summary" : "2508713",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508713"
    }, {
      "category" : "external",
      "summary" : "2508716",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508716"
    }, {
      "category" : "external",
      "summary" : "2508724",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508724"
    }, {
      "category" : "external",
      "summary" : "2508726",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508726"
    }, {
      "category" : "external",
      "summary" : "2508735",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508735"
    }, {
      "category" : "external",
      "summary" : "2508739",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508739"
    }, {
      "category" : "external",
      "summary" : "2508762",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508762"
    }, {
      "category" : "external",
      "summary" : "2508767",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508767"
    }, {
      "category" : "external",
      "summary" : "2508773",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508773"
    }, {
      "category" : "external",
      "summary" : "2508778",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508778"
    }, {
      "category" : "external",
      "summary" : "2508795",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508795"
    }, {
      "category" : "external",
      "summary" : "2508807",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508807"
    }, {
      "category" : "external",
      "summary" : "2508812",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508812"
    }, {
      "category" : "external",
      "summary" : "2508833",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508833"
    }, {
      "category" : "external",
      "summary" : "2508836",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508836"
    }, {
      "category" : "external",
      "summary" : "2508849",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508849"
    }, {
      "category" : "external",
      "summary" : "2508852",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508852"
    }, {
      "category" : "external",
      "summary" : "2508883",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508883"
    }, {
      "category" : "external",
      "summary" : "2508884",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508884"
    }, {
      "category" : "external",
      "summary" : "2508895",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508895"
    }, {
      "category" : "external",
      "summary" : "2508906",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508906"
    }, {
      "category" : "external",
      "summary" : "2508941",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508941"
    }, {
      "category" : "external",
      "summary" : "2508949",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508949"
    }, {
      "category" : "external",
      "summary" : "2508951",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508951"
    }, {
      "category" : "external",
      "summary" : "2508966",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508966"
    }, {
      "category" : "external",
      "summary" : "2508971",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508971"
    }, {
      "category" : "external",
      "summary" : "2508975",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508975"
    }, {
      "category" : "external",
      "summary" : "2508979",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508979"
    }, {
      "category" : "external",
      "summary" : "2508982",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508982"
    }, {
      "category" : "external",
      "summary" : "2508983",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508983"
    }, {
      "category" : "external",
      "summary" : "2508987",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508987"
    }, {
      "category" : "external",
      "summary" : "2509003",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2509003"
    }, {
      "category" : "external",
      "summary" : "2509006",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2509006"
    }, {
      "category" : "external",
      "summary" : "2512231",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512231"
    }, {
      "category" : "external",
      "summary" : "2512277",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512277"
    }, {
      "category" : "external",
      "summary" : "2512287",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512287"
    }, {
      "category" : "external",
      "summary" : "2512296",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512296"
    }, {
      "category" : "external",
      "summary" : "2512341",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512341"
    }, {
      "category" : "external",
      "summary" : "2512360",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512360"
    }, {
      "category" : "external",
      "summary" : "2518263",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2518263"
    }, {
      "category" : "external",
      "summary" : "2518265",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2518265"
    }, {
      "category" : "external",
      "summary" : "2520315",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520315"
    }, {
      "category" : "external",
      "summary" : "2520316",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520316"
    }, {
      "category" : "external",
      "summary" : "2520317",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520317"
    }, {
      "category" : "external",
      "summary" : "2520319",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520319"
    }, {
      "category" : "external",
      "summary" : "2520321",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520321"
    }, {
      "category" : "external",
      "summary" : "2520322",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520322"
    }, {
      "category" : "external",
      "summary" : "2520323",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520323"
    }, {
      "category" : "external",
      "summary" : "2521858",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2521858"
    }, {
      "category" : "external",
      "summary" : "2523795",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523795"
    }, {
      "category" : "external",
      "summary" : "2523835",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523835"
    }, {
      "category" : "external",
      "summary" : "2523847",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523847"
    }, {
      "category" : "external",
      "summary" : "2523850",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523850"
    }, {
      "category" : "external",
      "summary" : "2523858",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523858"
    }, {
      "category" : "external",
      "summary" : "2523859",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523859"
    }, {
      "category" : "external",
      "summary" : "2523865",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523865"
    }, {
      "category" : "external",
      "summary" : "2523872",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523872"
    }, {
      "category" : "external",
      "summary" : "2523875",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523875"
    }, {
      "category" : "external",
      "summary" : "2523893",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523893"
    }, {
      "category" : "external",
      "summary" : "2523904",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523904"
    }, {
      "category" : "external",
      "summary" : "2523912",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523912"
    }, {
      "category" : "external",
      "summary" : "2523917",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523917"
    }, {
      "category" : "external",
      "summary" : "2523926",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523926"
    }, {
      "category" : "external",
      "summary" : "2523942",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523942"
    }, {
      "category" : "external",
      "summary" : "2523950",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523950"
    }, {
      "category" : "external",
      "summary" : "2523958",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523958"
    }, {
      "category" : "external",
      "summary" : "2523998",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523998"
    }, {
      "category" : "external",
      "summary" : "2524034",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524034"
    }, {
      "category" : "external",
      "summary" : "2524044",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524044"
    }, {
      "category" : "external",
      "summary" : "2524048",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524048"
    }, {
      "category" : "external",
      "summary" : "2524055",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524055"
    }, {
      "category" : "external",
      "summary" : "2524057",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524057"
    }, {
      "category" : "external",
      "summary" : "2524059",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524059"
    }, {
      "category" : "external",
      "summary" : "2524066",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524066"
    }, {
      "category" : "external",
      "summary" : "2524082",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524082"
    }, {
      "category" : "external",
      "summary" : "2524088",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524088"
    }, {
      "category" : "external",
      "summary" : "2524091",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524091"
    }, {
      "category" : "external",
      "summary" : "2524096",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524096"
    }, {
      "category" : "external",
      "summary" : "2524102",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524102"
    }, {
      "category" : "external",
      "summary" : "2524104",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524104"
    }, {
      "category" : "external",
      "summary" : "2524106",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524106"
    }, {
      "category" : "external",
      "summary" : "2524111",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524111"
    }, {
      "category" : "external",
      "summary" : "2524566",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524566"
    }, {
      "category" : "external",
      "summary" : "2524567",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524567"
    }, {
      "category" : "external",
      "summary" : "2524568",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524568"
    }, {
      "category" : "external",
      "summary" : "2524569",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524569"
    }, {
      "category" : "external",
      "summary" : "2524570",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524570"
    }, {
      "category" : "external",
      "summary" : "2524571",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524571"
    }, {
      "category" : "external",
      "summary" : "2524573",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524573"
    }, {
      "category" : "external",
      "summary" : "2524574",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524574"
    }, {
      "category" : "external",
      "summary" : "2524575",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524575"
    }, {
      "category" : "external",
      "summary" : "2524576",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524576"
    }, {
      "category" : "external",
      "summary" : "2524577",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524577"
    }, {
      "category" : "external",
      "summary" : "2524578",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524578"
    }, {
      "category" : "external",
      "summary" : "2524579",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524579"
    }, {
      "category" : "external",
      "summary" : "2524580",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524580"
    }, {
      "category" : "external",
      "summary" : "2524581",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524581"
    }, {
      "category" : "external",
      "summary" : "2524582",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524582"
    }, {
      "category" : "external",
      "summary" : "2524583",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524583"
    }, {
      "category" : "external",
      "summary" : "2524584",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524584"
    }, {
      "category" : "external",
      "summary" : "2524585",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524585"
    }, {
      "category" : "external",
      "summary" : "2526490",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2526490"
    }, {
      "category" : "external",
      "summary" : "2535531",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2535531"
    }, {
      "category" : "external",
      "summary" : "2535532",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2535532"
    }, {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95403.json"
    } ],
    "title" : "Red Hat Security Advisory: webkit2gtk3 security update",
    "tracking" : {
      "current_release_date" : "2026-11-06T17:34:57+00:00",
      "generator" : {
        "date" : "2026-11-06T17:34:57+00:00",
        "engine" : {
          "name" : "Red Hat SDEngine",
          "version" : "5.4.5"
        }
      },
      "id" : "RHSA-2026:95403",
      "initial_release_date" : "2026-11-05T03:06:18+00:00",
      "revision_history" : [ {
        "date" : "2026-11-05T03:06:18+00:00",
        "number" : "1",
        "summary" : "Initial version"
      }, {
        "date" : "2026-11-05T03:06:18+00:00",
        "number" : "2",
        "summary" : "Last updated version"
      }, {
        "date" : "2026-11-06T17:34:57+00:00",
        "number" : "3",
        "summary" : "Last generated version"
      } ],
      "status" : "final",
      "version" : "3"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_name",
          "name" : "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product" : {
            "name" : "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
            "product_id" : "AppStream-8.4.0.Z.AUS",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redhat:rhel_aus:8.4::appstream"
            }
          }
        }, {
          "category" : "product_name",
          "name" : "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product" : {
            "name" : "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
            "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
            }
          }
        } ],
        "category" : "product_family",
        "name" : "Red Hat Enterprise Linux"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "webkit2gtk3-0:2.54.0-1.el8_4.src",
          "product" : {
            "name" : "webkit2gtk3-0:2.54.0-1.el8_4.src",
            "product_id" : "webkit2gtk3-0:2.54.0-1.el8_4.src",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el8_4?arch=src"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "src"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "webkit2gtk3-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el8_4?arch=i686"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-devel@2.54.0-1.el8_4?arch=i686"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-jsc@2.54.0-1.el8_4?arch=i686"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.0-1.el8_4?arch=i686"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-debugsource@2.54.0-1.el8_4?arch=i686"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.0-1.el8_4?arch=i686"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.54.0-1.el8_4?arch=i686"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.54.0-1.el8_4?arch=i686"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686",
          "product" : {
            "name" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686",
            "product_id" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.54.0-1.el8_4?arch=i686"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "i686"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "webkit2gtk3-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-devel@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-jsc@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-debugsource@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
          "product" : {
            "name" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
            "product_id" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.54.0-1.el8_4?arch=x86_64"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "x86_64"
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    } ],
    "relationships" : [ {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-0:2.54.0-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src"
      },
      "product_reference" : "webkit2gtk3-0:2.54.0-1.el8_4.src",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-0:2.54.0-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src"
      },
      "product_reference" : "webkit2gtk3-0:2.54.0-1.el8_4.src",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686"
      },
      "product_reference" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
        "product_id" : "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64"
      },
      "product_reference" : "webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64",
      "relates_to_product_reference" : "AppStream-8.4.0.Z.EUS.EXTENSION"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2023-4860",
    "discovery_date" : "2024-07-16T23:20:34+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2298302"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in Skia in Google Chrome. This issue may allow a remote attacker to compromise the renderer process to perform a sandbox escape via a crafted HTML page.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2023-4860"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2298302",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2298302"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2023-4860",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2023-4860"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2023-4860",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2023-4860"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/40064341",
      "url" : "https://issues.chromium.org/issues/40064341"
    } ],
    "release_date" : "2024-07-16T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia"
  }, {
    "cve" : "CVE-2024-7532",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2024-08-06T21:22:48.855940+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2303272"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds memory access in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2024-7532"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2303272",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2303272"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2024-7532",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2024-7532"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2024-7532",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2024-7532"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/350528343",
      "url" : "https://issues.chromium.org/issues/350528343"
    } ],
    "release_date" : "2024-08-06T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Out of bounds memory access in ANGLE"
  }, {
    "cve" : "CVE-2024-7966",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2024-08-21T21:20:12.076952+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2307088"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2024-7966"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2307088",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2307088"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2024-7966",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2024-7966"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2024-7966",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2024-7966"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html",
      "url" : "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/355465305",
      "url" : "https://issues.chromium.org/issues/355465305"
    } ],
    "release_date" : "2024-08-21T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page"
  }, {
    "cve" : "CVE-2024-8193",
    "cwe" : {
      "id" : "CWE-122",
      "name" : "Heap-based Buffer Overflow"
    },
    "discovery_date" : "2024-08-28T23:20:06.695008+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2308415"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium: skia: chromium: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2024-8193"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2308415",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2308415"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2024-8193",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2024-8193"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2024-8193",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2024-8193"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html",
      "url" : "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/360265320",
      "url" : "https://issues.chromium.org/issues/360265320"
    } ],
    "release_date" : "2024-08-28T23:15:05.477000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium: skia: chromium: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2024-8198",
    "cwe" : {
      "id" : "CWE-122",
      "name" : "Heap-based Buffer Overflow"
    },
    "discovery_date" : "2024-08-28T23:20:11.372693+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2308417"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium: skia: chromium: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2024-8198"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2308417",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2308417"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2024-8198",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2024-8198"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2024-8198",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2024-8198"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html",
      "url" : "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/360758697",
      "url" : "https://issues.chromium.org/issues/360758697"
    } ],
    "release_date" : "2024-08-28T23:15:06.243000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium: skia: chromium: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2024-8636",
    "cwe" : {
      "id" : "CWE-122",
      "name" : "Heap-based Buffer Overflow"
    },
    "discovery_date" : "2024-09-11T15:00:48.685963+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2311665"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium: skia: chromium: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2024-8636"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2311665",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2311665"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2024-8636",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2024-8636"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2024-8636",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2024-8636"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_10.html",
      "url" : "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_10.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/361461526",
      "url" : "https://issues.chromium.org/issues/361461526"
    } ],
    "release_date" : "2024-09-11T14:15:13.850000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium: skia: chromium: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2024-9123",
    "cwe" : {
      "id" : "CWE-472",
      "name" : "External Control of Assumed-Immutable Web Parameter"
    },
    "discovery_date" : "2024-09-25T01:21:54.963950+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2314571"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2024-9123"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2314571",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2314571"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2024-9123",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2024-9123"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2024-9123",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2024-9123"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_24.html",
      "url" : "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_24.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/365884464",
      "url" : "https://issues.chromium.org/issues/365884464"
    } ],
    "release_date" : "2024-09-25T01:15:48.903000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome"
  }, {
    "cve" : "CVE-2025-0436",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2025-01-15T12:01:38.636573+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2338161"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Skia component of Google Chrome. This issue may allow a remote attacker to exploit heap corruption via a crafted HTML page.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-0436"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2338161",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2338161"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-0436",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-0436"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-0436",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-0436"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html",
      "url" : "https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/382786791",
      "url" : "https://issues.chromium.org/issues/382786791"
    } ],
    "release_date" : "2025-01-15T10:58:52.562000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2025-0444",
    "cwe" : {
      "id" : "CWE-122",
      "name" : "Heap-based Buffer Overflow"
    },
    "discovery_date" : "2025-02-04T19:01:01.156246+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2343797"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-0444"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2343797",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2343797"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-0444",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-0444"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-0444",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-0444"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/390889644",
      "url" : "https://issues.chromium.org/issues/390889644"
    } ],
    "release_date" : "2025-02-04T18:53:06.437000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2025-8901",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2025-08-13T04:00:56.992088+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2388151"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in chromium-browser. An out-of-bounds write vulnerability exists within the ANGLE graphics component, allowing a remote attacker to trigger out-of-bounds memory access by providing a specially crafted HTML page. This allows an attacker to potentially manipulate memory contents. The vulnerability is triggered by processing malicious graphics instructions. This can lead to unexpected program behavior.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-8901"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2388151",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2388151"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-8901",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-8901"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-8901",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-8901"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/435139154",
      "url" : "https://issues.chromium.org/issues/435139154"
    } ],
    "release_date" : "2025-08-13T02:43:44.252000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability"
  }, {
    "cve" : "CVE-2025-9478",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2025-08-26T19:01:00.351943+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2391109"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-9478"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2391109",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2391109"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-9478",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-9478"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-9478",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-9478"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_26.html",
      "url" : "https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_26.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/437825940",
      "url" : "https://issues.chromium.org/issues/437825940"
    } ],
    "release_date" : "2025-08-26T18:51:35.354000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2025-10502",
    "cwe" : {
      "id" : "CWE-122",
      "name" : "Heap-based Buffer Overflow"
    },
    "discovery_date" : "2025-09-24T17:01:28.193030+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2397874"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A Heap based buffer overflow issue has been ientified in ANGLE in Google Chrome that allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-10502"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2397874",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2397874"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-10502",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-10502"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-10502",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-10502"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html",
      "url" : "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/438038775",
      "url" : "https://issues.chromium.org/issues/438038775"
    } ],
    "release_date" : "2025-09-24T16:17:13.365000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-0908",
    "discovery_date" : "2026-01-20T14:39:02.087465+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2431128"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-0908"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2431128",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2431128"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-0908",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-0908"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-0908",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-0908"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html",
      "url" : "https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/452209503",
      "url" : "https://issues.chromium.org/issues/452209503"
    } ],
    "release_date" : "2026-01-13T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-3536",
    "discovery_date" : "2026-03-06T14:08:49.477991+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2444613"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=485622239",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-3536"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2444613",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2444613"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-3536",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-3536"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3536",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3536"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/485622239",
      "url" : "https://issues.chromium.org/issues/485622239"
    } ],
    "release_date" : "2026-03-03T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-3538",
    "discovery_date" : "2026-03-06T14:08:49.478015+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2444617"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=484983991",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-3538"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2444617",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2444617"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-3538",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-3538"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3538",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3538"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/484983991",
      "url" : "https://issues.chromium.org/issues/484983991"
    } ],
    "release_date" : "2026-03-03T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-3909",
    "discovery_date" : "2026-03-13T08:00:25.766684+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2447195"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=491421267",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-3909"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2447195",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2447195"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-3909",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-3909"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3909",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3909"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/491421267",
      "url" : "https://issues.chromium.org/issues/491421267"
    }, {
      "category" : "external",
      "summary" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    } ],
    "release_date" : "2026-03-12T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "exploit_status",
      "date" : "2026-03-13T00:00:00+00:00",
      "details" : "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    }, {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia"
  }, {
    "cve" : "CVE-2026-3931",
    "discovery_date" : "2026-03-13T08:09:22.318055+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2446868"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=417599694",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-3931"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2446868",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2446868"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-3931",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-3931"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3931",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3931"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_10.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_10.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/417599694",
      "url" : "https://issues.chromium.org/issues/417599694"
    } ],
    "release_date" : "2026-03-10T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2026-4448",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-03-20T08:05:27.267292+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2449406"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=486972661",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-4448"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2449406",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449406"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-4448",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-4448"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-4448",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-4448"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/486972661",
      "url" : "https://issues.chromium.org/issues/486972661"
    } ],
    "release_date" : "2026-03-18T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-4452",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-03-20T08:05:27.267301+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2449388"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=487977696",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-4452"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2449388",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449388"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-4452",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-4452"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-4452",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-4452"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/487977696",
      "url" : "https://issues.chromium.org/issues/487977696"
    } ],
    "release_date" : "2026-03-18T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-4460",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-03-20T08:05:27.267319+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2449412"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=490254124",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-4460"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2449412",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449412"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-4460",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-4460"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-4460",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-4460"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/490254124",
      "url" : "https://issues.chromium.org/issues/490254124"
    } ],
    "release_date" : "2026-03-18T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia"
  }, {
    "cve" : "CVE-2026-4464",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-03-20T08:05:27.267329+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2449382"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=487208468",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-4464"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2449382",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449382"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-4464",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-4464"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-4464",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-4464"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/487208468",
      "url" : "https://issues.chromium.org/issues/487208468"
    } ],
    "release_date" : "2026-03-18T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-5275",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-04-01T05:58:57.659074+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2453693"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=489494022",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-5275"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2453693",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2453693"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-5275",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-5275"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5275",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5275"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/489494022",
      "url" : "https://issues.chromium.org/issues/489494022"
    } ],
    "release_date" : "2026-03-31T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-5277",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-04-01T05:58:57.659083+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2453696"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=489791424",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-5277"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2453696",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2453696"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-5277",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-5277"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5277",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5277"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/489791424",
      "url" : "https://issues.chromium.org/issues/489791424"
    } ],
    "release_date" : "2026-03-31T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-5283",
    "cwe" : {
      "id" : "CWE-346",
      "name" : "Origin Validation Error"
    },
    "discovery_date" : "2026-04-01T05:58:57.659104+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2453681"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=492131521",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-5283"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2453681",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2453681"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-5283",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-5283"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5283",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5283"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html",
      "url" : "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/492131521",
      "url" : "https://issues.chromium.org/issues/492131521"
    } ],
    "release_date" : "2026-03-31T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-5868",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-04-10T05:59:35.241015+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2456737"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=493256564",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-5868"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2456737",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456737"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-5868",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-5868"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5868",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5868"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/493256564",
      "url" : "https://issues.chromium.org/issues/493256564"
    } ],
    "release_date" : "2026-04-07T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-5870",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-04-10T05:59:35.241023+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2456802"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=495534710",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-5870"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2456802",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456802"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-5870",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-5870"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5870",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5870"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/495534710",
      "url" : "https://issues.chromium.org/issues/495534710"
    } ],
    "release_date" : "2026-04-07T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-5879",
    "cwe" : {
      "id" : "CWE-79",
      "name" : "Improper Neutralization of Input During Web Page Generation"
    },
    "discovery_date" : "2026-04-10T05:59:35.241049+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2456779"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=40073848",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-5879"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2456779",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456779"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-5879",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-5879"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5879",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5879"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/40073848",
      "url" : "https://issues.chromium.org/issues/40073848"
    } ],
    "release_date" : "2026-04-07T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-6296",
    "cwe" : {
      "id" : "CWE-131",
      "name" : "Incorrect Calculation of Buffer Size"
    },
    "discovery_date" : "2026-04-16T22:30:56.163744+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2458783"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=490170083",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-6296"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2458783",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458783"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-6296",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-6296"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-6296",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-6296"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/490170083",
      "url" : "https://issues.chromium.org/issues/490170083"
    } ],
    "release_date" : "2026-04-15T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-6298",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-04-15T22:45:13.188864+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2458798"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=495700484",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-6298"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2458798",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458798"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-6298",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-6298"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-6298",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-6298"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/495700484",
      "url" : "https://issues.chromium.org/issues/495700484"
    } ],
    "release_date" : "2026-04-15T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2026-6364",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-04-16T22:33:16.957218+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2458786"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=502103414",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-6364"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2458786",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458786"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-6364",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-6364"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-6364",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-6364"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/502103414",
      "url" : "https://issues.chromium.org/issues/502103414"
    } ],
    "release_date" : "2026-04-15T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia"
  }, {
    "cve" : "CVE-2026-7340",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-04-29T00:12:02.207016+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2463664"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497896137",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7340"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2463664",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2463664"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7340",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7340"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7340",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7340"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497896137",
      "url" : "https://issues.chromium.org/issues/497896137"
    } ],
    "release_date" : "2026-04-28T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "LOW",
        "baseScore" : 5.4,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-7353",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-04-29T00:12:02.206962+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2463657"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498809718",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7353"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2463657",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2463657"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7353",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7353"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7353",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7353"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498809718",
      "url" : "https://issues.chromium.org/issues/498809718"
    } ],
    "release_date" : "2026-04-28T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2026-7354",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-04-29T00:12:02.206959+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2463691"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read and write flaw was found in the Angle component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498746519",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read and write in Angle",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7354"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2463691",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2463691"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7354",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7354"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7354",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7354"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498746519",
      "url" : "https://issues.chromium.org/issues/498746519"
    } ],
    "release_date" : "2026-04-28T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read and write in Angle"
  }, {
    "cve" : "CVE-2026-7359",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-04-29T00:12:02.206943+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2463670"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=496284494",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7359"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2463670",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2463670"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7359",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7359"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7359",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7359"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html",
      "url" : "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/496284494",
      "url" : "https://issues.chromium.org/issues/496284494"
    } ],
    "release_date" : "2026-04-28T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-7900",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-05-06T21:17:05.928281+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467362"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=496503799",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7900"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467362",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467362"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7900",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7900"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7900",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7900"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/496503799",
      "url" : "https://issues.chromium.org/issues/496503799"
    } ],
    "release_date" : "2026-05-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-7901",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-06T21:17:05.928290+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467315"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497724490",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7901"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467315",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467315"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7901",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7901"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7901",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7901"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497724490",
      "url" : "https://issues.chromium.org/issues/497724490"
    } ],
    "release_date" : "2026-05-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-7903",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-06T21:17:05.928300+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467337"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=491760376",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7903"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467337",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467337"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7903",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7903"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7903",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7903"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/491760376",
      "url" : "https://issues.chromium.org/issues/491760376"
    } ],
    "release_date" : "2026-05-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-7920",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-06T21:17:05.928389+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467385"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498989348",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7920"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467385",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467385"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7920",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7920"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7920",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7920"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498989348",
      "url" : "https://issues.chromium.org/issues/498989348"
    } ],
    "release_date" : "2026-05-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-7923",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-05-06T21:17:05.928406+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467351"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500080194",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7923"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467351",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467351"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7923",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7923"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7923",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7923"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500080194",
      "url" : "https://issues.chromium.org/issues/500080194"
    } ],
    "release_date" : "2026-05-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia"
  }, {
    "cve" : "CVE-2026-7942",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-06T21:17:05.928508+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467399"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=495363705",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7942"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467399",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467399"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7942",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7942"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7942",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7942"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/495363705",
      "url" : "https://issues.chromium.org/issues/495363705"
    } ],
    "release_date" : "2026-05-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-7943",
    "cwe" : {
      "id" : "CWE-822",
      "name" : "Untrusted Pointer Dereference"
    },
    "discovery_date" : "2026-05-06T21:17:05.928512+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467432"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=495373657",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7943"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467432",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467432"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7943",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7943"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7943",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7943"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/495373657",
      "url" : "https://issues.chromium.org/issues/495373657"
    } ],
    "release_date" : "2026-05-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-7949",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-05-06T21:17:05.928542+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467316"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=496206134",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-7949"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467316",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467316"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-7949",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-7949"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7949",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-7949"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/496206134",
      "url" : "https://issues.chromium.org/issues/496206134"
    } ],
    "release_date" : "2026-05-05T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia"
  }, {
    "cve" : "CVE-2026-8510",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-14T21:01:28.457701+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2477624"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=502636904",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-8510"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2477624",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477624"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-8510",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-8510"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8510",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8510"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/502636904",
      "url" : "https://issues.chromium.org/issues/502636904"
    } ],
    "release_date" : "2026-05-14T19:52:10.435000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-8519",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-14T21:04:14.105340+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2477687"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498400132",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-8519"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2477687",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477687"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-8519",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-8519"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8519",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8519"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498400132",
      "url" : "https://issues.chromium.org/issues/498400132"
    } ],
    "release_date" : "2026-05-14T19:52:14.583000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-8525",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-05-14T21:01:54.381436+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2477634"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497928952",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-8525"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2477634",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477634"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-8525",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-8525"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8525",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8525"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497928952",
      "url" : "https://issues.chromium.org/issues/497928952"
    } ],
    "release_date" : "2026-05-14T19:52:17.052000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-8554",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-05-14T21:01:56.887916+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2477635"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A type confusion flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499131214",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Type Confusion in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-8554"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2477635",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477635"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-8554",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-8554"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8554",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8554"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499131214",
      "url" : "https://issues.chromium.org/issues/499131214"
    } ],
    "release_date" : "2026-05-14T19:52:27.539000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Type Confusion in ANGLE"
  }, {
    "cve" : "CVE-2026-8556",
    "cwe" : {
      "id" : "CWE-346",
      "name" : "Origin Validation Error"
    },
    "discovery_date" : "2026-05-14T21:03:08.080038+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2477663"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500052361",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-8556"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2477663",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477663"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-8556",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-8556"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8556",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8556"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500052361",
      "url" : "https://issues.chromium.org/issues/500052361"
    } ],
    "release_date" : "2026-05-14T19:52:28.374000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-8567",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-14T21:03:26.115363+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2477670"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=484986863",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-8567"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2477670",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477670"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-8567",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-8567"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8567",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8567"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/484986863",
      "url" : "https://issues.chromium.org/issues/484986863"
    } ],
    "release_date" : "2026-05-14T19:52:31.885000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-8579",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-05-14T21:03:15.849056+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2477666"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=496526419",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-8579"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2477666",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477666"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-8579",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-8579"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8579",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-8579"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/496526419",
      "url" : "https://issues.chromium.org/issues/496526419"
    } ],
    "release_date" : "2026-05-14T19:52:41.555000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia"
  }, {
    "cve" : "CVE-2026-9877",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070669+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483012"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=496445460",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9877"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483012",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483012"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9877",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9877"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9877",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9877"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/496445460",
      "url" : "https://issues.chromium.org/issues/496445460"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9878",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070673+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483059"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499054245",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9878"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483059",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483059"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9878",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9878"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9878",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9878"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499054245",
      "url" : "https://issues.chromium.org/issues/499054245"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9879",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-05-29T00:12:51.070677+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482997"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499129768",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9879"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482997",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482997"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9879",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9879"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9879",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9879"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499129768",
      "url" : "https://issues.chromium.org/issues/499129768"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-9882",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-29T00:12:51.070694+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483016"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=506375217",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9882"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483016",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483016"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9882",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9882"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9882",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9882"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/506375217",
      "url" : "https://issues.chromium.org/issues/506375217"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-9892",
    "cwe" : {
      "id" : "CWE-807",
      "name" : "Reliance on Untrusted Inputs in a Security Decision"
    },
    "discovery_date" : "2026-05-29T00:12:51.070743+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483103"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513948178",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9892"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483103",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483103"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9892",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9892"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9892",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9892"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513948178",
      "url" : "https://issues.chromium.org/issues/513948178"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 8.7,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia"
  }, {
    "cve" : "CVE-2026-9893",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070748+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483045"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513972075",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9893"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483045",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483045"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9893",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9893"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9893",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9893"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513972075",
      "url" : "https://issues.chromium.org/issues/513972075"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-9899",
    "cwe" : {
      "id" : "CWE-364",
      "name" : "Signal Handler Race Condition"
    },
    "discovery_date" : "2026-05-29T00:12:51.070777+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482999"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497533569",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9899"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482999",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482999"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9899",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9899"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9899",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9899"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497533569",
      "url" : "https://issues.chromium.org/issues/497533569"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9900",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-05-29T00:12:51.070782+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483067"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497637277",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9900"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483067",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483067"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9900",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9900"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9900",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9900"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497637277",
      "url" : "https://issues.chromium.org/issues/497637277"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-9901",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070786+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483060"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497737770",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9901"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483060",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483060"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9901",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9901"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9901",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9901"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497737770",
      "url" : "https://issues.chromium.org/issues/497737770"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9904",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070800+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482987"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498804020",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9904"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482987",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482987"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9904",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9904"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9904",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9904"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498804020",
      "url" : "https://issues.chromium.org/issues/498804020"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9908",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-05-29T00:12:51.070820+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483027"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499091328",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9908"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483027",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483027"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9908",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9908"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9908",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9908"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499091328",
      "url" : "https://issues.chromium.org/issues/499091328"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-9909",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-29T00:12:51.070824+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483023"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499152771",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9909"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483023",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483023"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9909",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9909"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9909",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9909"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499152771",
      "url" : "https://issues.chromium.org/issues/499152771"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-9910",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-05-29T00:12:51.070828+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483018"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499176133",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds memory access in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9910"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483018",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483018"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9910",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9910"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9910",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9910"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499176133",
      "url" : "https://issues.chromium.org/issues/499176133"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds memory access in ANGLE"
  }, {
    "cve" : "CVE-2026-9911",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-29T00:12:51.070832+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483083"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499205491",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9911"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483083",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483083"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9911",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9911"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9911",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9911"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499205491",
      "url" : "https://issues.chromium.org/issues/499205491"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-9913",
    "cwe" : {
      "id" : "CWE-805",
      "name" : "Buffer Access with Incorrect Length Value"
    },
    "discovery_date" : "2026-05-29T00:12:51.070843+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483088"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500046096",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9913"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483088",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483088"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9913",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9913"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9913",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9913"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500046096",
      "url" : "https://issues.chromium.org/issues/500046096"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-9914",
    "cwe" : {
      "id" : "CWE-501",
      "name" : "Trust Boundary Violation"
    },
    "discovery_date" : "2026-05-29T00:12:51.070847+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483049"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500047428",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9914"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483049",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483049"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9914",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9914"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9914",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9914"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500047428",
      "url" : "https://issues.chromium.org/issues/500047428"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-9915",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-05-29T00:12:51.070851+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482977"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500063836",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9915"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482977",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482977"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9915",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9915"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9915",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9915"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500063836",
      "url" : "https://issues.chromium.org/issues/500063836"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-9916",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-05-29T00:12:51.070856+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483111"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500080303",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9916"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483111",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483111"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9916",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9916"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9916",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9916"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500080303",
      "url" : "https://issues.chromium.org/issues/500080303"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-9923",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070889+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482973"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500393328",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9923"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482973",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482973"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9923",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9923"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9923",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9923"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500393328",
      "url" : "https://issues.chromium.org/issues/500393328"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-9924",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-05-29T00:12:51.070893+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483028"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500398345",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9924"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483028",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483028"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9924",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9924"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9924",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9924"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500398345",
      "url" : "https://issues.chromium.org/issues/500398345"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-9925",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070900+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483001"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500536458",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9925"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483001",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483001"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9925",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9925"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9925",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9925"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500536458",
      "url" : "https://issues.chromium.org/issues/500536458"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9926",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-05-29T00:12:51.070906+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483011"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500540748",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9926"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483011",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483011"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9926",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9926"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9926",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9926"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500540748",
      "url" : "https://issues.chromium.org/issues/500540748"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-9927",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070911+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483013"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500540958",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9927"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483013",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483013"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9927",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9927"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9927",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9927"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500540958",
      "url" : "https://issues.chromium.org/issues/500540958"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9928",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-05-29T00:12:51.070915+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482984"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501125002",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9928"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482984",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482984"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9928",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9928"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9928",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9928"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501125002",
      "url" : "https://issues.chromium.org/issues/501125002"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-9932",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070934+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482986"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501563323",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9932"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482986",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482986"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9932",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9932"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9932",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9932"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501563323",
      "url" : "https://issues.chromium.org/issues/501563323"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9935",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-05-29T00:12:51.070948+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483080"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501584689",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9935"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483080",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483080"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9935",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9935"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9935",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9935"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501584689",
      "url" : "https://issues.chromium.org/issues/501584689"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-9940",
    "cwe" : {
      "id" : "CWE-131",
      "name" : "Incorrect Calculation of Buffer Size"
    },
    "discovery_date" : "2026-05-29T00:12:51.070975+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483000"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=502738003",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9940"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483000",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483000"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9940",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9940"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9940",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9940"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/502738003",
      "url" : "https://issues.chromium.org/issues/502738003"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-9941",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.070979+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483057"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=502812366",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9941"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483057",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483057"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9941",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9941"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9941",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9941"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/502812366",
      "url" : "https://issues.chromium.org/issues/502812366"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9942",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-05-29T00:12:51.070983+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483101"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=503438092",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9942"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483101",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483101"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9942",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9942"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9942",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9942"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/503438092",
      "url" : "https://issues.chromium.org/issues/503438092"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 8.7,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-9944",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-05-29T00:12:51.070995+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483036"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=503471286",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9944"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483036",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483036"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9944",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9944"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9944",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9944"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/503471286",
      "url" : "https://issues.chromium.org/issues/503471286"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-9946",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.071003+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483014"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=503596863",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9946"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483014",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483014"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9946",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9946"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9946",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9946"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/503596863",
      "url" : "https://issues.chromium.org/issues/503596863"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-9953",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-05-29T00:12:51.071039+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483039"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=503985322",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9953"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483039",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483039"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9953",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9953"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9953",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9953"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/503985322",
      "url" : "https://issues.chromium.org/issues/503985322"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-9965",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-05-29T00:12:51.071096+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483007"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=506377574",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9965"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483007",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483007"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9965",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9965"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9965",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9965"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/506377574",
      "url" : "https://issues.chromium.org/issues/506377574"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-9969",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-05-29T00:12:51.071119+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483068"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=506550494",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9969"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483068",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483068"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9969",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9969"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9969",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9969"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/506550494",
      "url" : "https://issues.chromium.org/issues/506550494"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-9975",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-05-29T00:12:51.071145+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483041"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read and write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=511719039",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read and write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9975"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483041",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483041"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9975",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9975"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9975",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9975"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/511719039",
      "url" : "https://issues.chromium.org/issues/511719039"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read and write in ANGLE"
  }, {
    "cve" : "CVE-2026-9981",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-29T00:12:51.071175+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483056"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=512995705",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9981"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483056",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483056"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9981",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9981"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9981",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9981"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/512995705",
      "url" : "https://issues.chromium.org/issues/512995705"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia"
  }, {
    "cve" : "CVE-2026-9982",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-05-29T00:12:51.071180+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483042"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513001247",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9982"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483042",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483042"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9982",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9982"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9982",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9982"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513001247",
      "url" : "https://issues.chromium.org/issues/513001247"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-9983",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-05-29T00:12:51.071184+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483108"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A type confusion flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513001309",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9983"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483108",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483108"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9983",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9983"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9983",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9983"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513001309",
      "url" : "https://issues.chromium.org/issues/513001309"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia"
  }, {
    "cve" : "CVE-2026-9998",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-29T00:12:51.071262+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483062"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513337118",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9998"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483062",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483062"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9998",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9998"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9998",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9998"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513337118",
      "url" : "https://issues.chromium.org/issues/513337118"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-9999",
    "cwe" : {
      "id" : "CWE-94",
      "name" : "Improper Control of Generation of Code"
    },
    "discovery_date" : "2026-05-29T00:12:51.071267+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483015"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513364480",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-9999"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483015",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483015"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-9999",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-9999"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9999",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-9999"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513364480",
      "url" : "https://issues.chromium.org/issues/513364480"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-10009",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-29T00:12:51.071320+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483114"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513973560",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10009"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483114",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483114"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10009",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10009"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10009",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10009"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513973560",
      "url" : "https://issues.chromium.org/issues/513973560"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-10011",
    "cwe" : {
      "id" : "CWE-346",
      "name" : "Origin Validation Error"
    },
    "discovery_date" : "2026-05-29T00:12:51.071331+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483070"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514017326",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10011"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483070",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483070"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10011",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10011"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10011",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10011"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/514017326",
      "url" : "https://issues.chromium.org/issues/514017326"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia"
  }, {
    "cve" : "CVE-2026-10012",
    "cwe" : {
      "id" : "CWE-364",
      "name" : "Signal Handler Race Condition"
    },
    "discovery_date" : "2026-05-29T00:12:51.071335+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483035"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514063977",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10012"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483035",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483035"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10012",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10012"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10012",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10012"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/514063977",
      "url" : "https://issues.chromium.org/issues/514063977"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-10018",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-29T00:12:51.071364+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482995"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=504175501",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10018"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482995",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482995"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10018",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10018"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10018",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10018"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/504175501",
      "url" : "https://issues.chromium.org/issues/504175501"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-10019",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-05-29T00:12:51.071368+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2483058"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=505056913",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10019"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2483058",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483058"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10019",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10019"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10019",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10019"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/505056913",
      "url" : "https://issues.chromium.org/issues/505056913"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-10020",
    "cwe" : {
      "id" : "CWE-1289",
      "name" : "Improper Validation of Unsafe Equivalence in Input"
    },
    "discovery_date" : "2026-05-29T00:12:51.071373+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482975"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=496565479",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10020"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482975",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482975"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10020",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10020"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10020",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10020"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html",
      "url" : "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/496565479",
      "url" : "https://issues.chromium.org/issues/496565479"
    } ],
    "release_date" : "2026-05-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia"
  }, {
    "cve" : "CVE-2026-10881",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.523902+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485126"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read and write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498904293",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read and write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10881"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485126",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485126"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10881",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10881"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10881",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10881"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498904293",
      "url" : "https://issues.chromium.org/issues/498904293"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read and write in ANGLE"
  }, {
    "cve" : "CVE-2026-10883",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-06-06T06:12:25.523951+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485237"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=503768143",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10883"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485237",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485237"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10883",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10883"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10883",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10883"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/503768143",
      "url" : "https://issues.chromium.org/issues/503768143"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-10889",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.524011+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2484974"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513003797",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10889"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2484974",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484974"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10889",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10889"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10889",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10889"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513003797",
      "url" : "https://issues.chromium.org/issues/513003797"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-10907",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-06-06T06:12:25.524188+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485153"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=489071023",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10907"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485153",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485153"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10907",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10907"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10907",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10907"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/489071023",
      "url" : "https://issues.chromium.org/issues/489071023"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-10913",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-06-06T06:12:25.524234+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485188"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497450927",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10913"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485188",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485188"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10913",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10913"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10913",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10913"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497450927",
      "url" : "https://issues.chromium.org/issues/497450927"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-10914",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-06-06T06:12:25.524245+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485299"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497574371",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10914"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485299",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485299"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10914",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10914"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10914",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10914"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497574371",
      "url" : "https://issues.chromium.org/issues/497574371"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-10919",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-06-06T06:12:25.524287+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485037"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498872764",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10919"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485037",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485037"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10919",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10919"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10919",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10919"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498872764",
      "url" : "https://issues.chromium.org/issues/498872764"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 8.7,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-10925",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-06-06T06:12:25.524341+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485289"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500071763",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10925"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485289",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485289"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10925",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10925"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10925",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10925"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500071763",
      "url" : "https://issues.chromium.org/issues/500071763"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia"
  }, {
    "cve" : "CVE-2026-10929",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-06-06T06:12:25.524374+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485185"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500429259",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10929"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485185",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485185"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10929",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10929"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10929",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10929"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500429259",
      "url" : "https://issues.chromium.org/issues/500429259"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-10930",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.524383+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485145"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500472605",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10930"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485145",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485145"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10930",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10930"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10930",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10930"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500472605",
      "url" : "https://issues.chromium.org/issues/500472605"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-10941",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-06-06T06:12:25.524481+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485352"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds memory access flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=503958940",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10941"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485352",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485352"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10941",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10941"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10941",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10941"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/503958940",
      "url" : "https://issues.chromium.org/issues/503958940"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia"
  }, {
    "cve" : "CVE-2026-10955",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-06-06T06:12:25.524608+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485060"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A type confusion flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=506374676",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Type Confusion in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10955"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485060",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485060"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10955",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10955"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10955",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10955"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/506374676",
      "url" : "https://issues.chromium.org/issues/506374676"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Type Confusion in ANGLE"
  }, {
    "cve" : "CVE-2026-10974",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-06-06T06:12:25.524784+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485064"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513135862",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10974"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485064",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485064"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10974",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10974"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10974",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10974"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513135862",
      "url" : "https://issues.chromium.org/issues/513135862"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-10977",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.524814+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485236"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513340227",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10977"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485236",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485236"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10977",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10977"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10977",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10977"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513340227",
      "url" : "https://issues.chromium.org/issues/513340227"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia"
  }, {
    "cve" : "CVE-2026-10979",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.524831+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485319"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513468021",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10979"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485319",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485319"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10979",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10979"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10979",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10979"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513468021",
      "url" : "https://issues.chromium.org/issues/513468021"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-10985",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.524885+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2484949"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514082801",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10985"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2484949",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484949"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10985",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10985"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10985",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10985"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/514082801",
      "url" : "https://issues.chromium.org/issues/514082801"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia"
  }, {
    "cve" : "CVE-2026-10993",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.524958+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2484981"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=504160794",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10993"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2484981",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484981"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10993",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10993"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10993",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10993"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/504160794",
      "url" : "https://issues.chromium.org/issues/504160794"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2026-10994",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.524968+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2484977"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=504820809",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10994"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2484977",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484977"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10994",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10994"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10994",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10994"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/504820809",
      "url" : "https://issues.chromium.org/issues/504820809"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-10999",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-06-06T06:12:25.525014+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485042"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=489369089",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds memory access in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-10999"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485042",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485042"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10999",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10999"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10999",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10999"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/489369089",
      "url" : "https://issues.chromium.org/issues/489369089"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.0,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds memory access in ANGLE"
  }, {
    "cve" : "CVE-2026-11004",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.525059+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485155"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=494823889",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11004"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485155",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485155"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11004",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11004"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11004",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11004"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/494823889",
      "url" : "https://issues.chromium.org/issues/494823889"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.7,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-11005",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.525067+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485150"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=495052581",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11005"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485150",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485150"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11005",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11005"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11005",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11005"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/495052581",
      "url" : "https://issues.chromium.org/issues/495052581"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.7,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-11024",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-06-06T06:12:25.525264+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2484992"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A stack buffer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497591594",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11024"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2484992",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484992"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11024",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11024"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11024",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11024"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497591594",
      "url" : "https://issues.chromium.org/issues/497591594"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia"
  }, {
    "cve" : "CVE-2026-11039",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.525409+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485071"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498204112",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11039"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485071",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485071"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11039",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11039"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11039",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11039"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498204112",
      "url" : "https://issues.chromium.org/issues/498204112"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia"
  }, {
    "cve" : "CVE-2026-11040",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-06-06T06:12:25.525419+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485161"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498371085",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11040"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485161",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485161"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11040",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11040"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11040",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11040"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498371085",
      "url" : "https://issues.chromium.org/issues/498371085"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-11043",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-06-06T06:12:25.525445+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485263"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498721316",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11043"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485263",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485263"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11043",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11043"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11043",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11043"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498721316",
      "url" : "https://issues.chromium.org/issues/498721316"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-11044",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-06-06T06:12:25.525455+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485217"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498724803",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11044"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485217",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485217"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11044",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11044"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11044",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11044"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498724803",
      "url" : "https://issues.chromium.org/issues/498724803"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-11051",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.525521+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485303"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498828605",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11051"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485303",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485303"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11051",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11051"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11051",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11051"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498828605",
      "url" : "https://issues.chromium.org/issues/498828605"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-11055",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-06-06T06:12:25.525554+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485123"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498881735",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11055"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485123",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485123"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11055",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11055"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11055",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11055"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498881735",
      "url" : "https://issues.chromium.org/issues/498881735"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-11057",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.525575+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485036"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498951946",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11057"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485036",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485036"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11057",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11057"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11057",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11057"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498951946",
      "url" : "https://issues.chromium.org/issues/498951946"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia"
  }, {
    "cve" : "CVE-2026-11061",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-06-06T06:12:25.525611+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485306"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499031961",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11061"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485306",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485306"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11061",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11061"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11061",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11061"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499031961",
      "url" : "https://issues.chromium.org/issues/499031961"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-11065",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-06-06T06:12:25.525646+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485231"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499093536",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11065"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485231",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485231"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11065",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11065"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11065",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11065"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499093536",
      "url" : "https://issues.chromium.org/issues/499093536"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-11066",
    "cwe" : {
      "id" : "CWE-807",
      "name" : "Reliance on Untrusted Inputs in a Security Decision"
    },
    "discovery_date" : "2026-06-06T06:12:25.525656+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485342"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499124128",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11066"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485342",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485342"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11066",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11066"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11066",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11066"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499124128",
      "url" : "https://issues.chromium.org/issues/499124128"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-11087",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.525880+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485077"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500140149",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11087"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485077",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485077"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11087",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11087"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11087",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11087"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500140149",
      "url" : "https://issues.chromium.org/issues/500140149"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11088",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-06-06T06:12:25.525888+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485007"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500144879",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11088"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485007",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485007"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11088",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11088"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11088",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11088"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500144879",
      "url" : "https://issues.chromium.org/issues/500144879"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "LOW",
        "baseScore" : 8.1,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-11090",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.525911+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485204"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500161302",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11090"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485204",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485204"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11090",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11090"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11090",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11090"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500161302",
      "url" : "https://issues.chromium.org/issues/500161302"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11099",
    "discovery_date" : "2026-06-06T06:12:25.525995+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485638"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A vulnerability flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500414865",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11099"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485638",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485638"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11099",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11099"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11099",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11099"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia"
  }, {
    "cve" : "CVE-2026-11104",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.526044+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485072"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500501226",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11104"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485072",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485072"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11104",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11104"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11104",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11104"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500501226",
      "url" : "https://issues.chromium.org/issues/500501226"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.7,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11109",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.526093+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485292"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500524833",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11109"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485292",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485292"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11109",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11109"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11109",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11109"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500524833",
      "url" : "https://issues.chromium.org/issues/500524833"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11110",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.526100+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485253"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500528864",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11110"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485253",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485253"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11110",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11110"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11110",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11110"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500528864",
      "url" : "https://issues.chromium.org/issues/500528864"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11111",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.526122+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485056"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500530720",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11111"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485056",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485056"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11111",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11111"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11111",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11111"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500530720",
      "url" : "https://issues.chromium.org/issues/500530720"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-11113",
    "cwe" : {
      "id" : "CWE-1173",
      "name" : "Improper Use of Validation Framework"
    },
    "discovery_date" : "2026-06-06T06:12:25.526147+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2484968"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500560764",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11113"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2484968",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484968"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11113",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11113"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11113",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11113"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500560764",
      "url" : "https://issues.chromium.org/issues/500560764"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-11121",
    "cwe" : {
      "id" : "CWE-346",
      "name" : "Origin Validation Error"
    },
    "discovery_date" : "2026-06-06T06:12:25.526224+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485015"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501483855",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11121"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485015",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485015"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11121",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11121"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11121",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11121"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501483855",
      "url" : "https://issues.chromium.org/issues/501483855"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia"
  }, {
    "cve" : "CVE-2026-11123",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.526242+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485275"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501505198",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11123"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485275",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485275"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11123",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11123"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11123",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11123"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501505198",
      "url" : "https://issues.chromium.org/issues/501505198"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11124",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-06-06T06:12:25.526250+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485043"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501511299",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11124"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485043",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485043"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11124",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11124"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11124",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11124"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501511299",
      "url" : "https://issues.chromium.org/issues/501511299"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2026-11137",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.526375+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485322"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501647943",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11137"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485322",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485322"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11137",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11137"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11137",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11137"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501647943",
      "url" : "https://issues.chromium.org/issues/501647943"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11138",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.526383+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485300"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501650354",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11138"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485300",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485300"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11138",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11138"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11138",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11138"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501650354",
      "url" : "https://issues.chromium.org/issues/501650354"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11159",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.526581+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485081"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501861921",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11159"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485081",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485081"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11159",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11159"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11159",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11159"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501861921",
      "url" : "https://issues.chromium.org/issues/501861921"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia"
  }, {
    "cve" : "CVE-2026-11191",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-06T06:12:25.526875+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485100"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=503392431",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds memory access in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11191"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485100",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485100"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11191",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11191"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11191",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11191"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/503392431",
      "url" : "https://issues.chromium.org/issues/503392431"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "LOW",
        "baseScore" : 6.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds memory access in ANGLE"
  }, {
    "cve" : "CVE-2026-11268",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-06-06T06:12:25.527619+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2485214"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500528706",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11268"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2485214",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2485214"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11268",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11268"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11268",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11268"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500528706",
      "url" : "https://issues.chromium.org/issues/500528706"
    } ],
    "release_date" : "2026-06-02T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Low"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-11663",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-06-10T14:58:25.399360+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2486642"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513820666",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11663"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2486642",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2486642"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11663",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11663"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11663",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11663"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513820666",
      "url" : "https://issues.chromium.org/issues/513820666"
    } ],
    "release_date" : "2026-06-08T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-11675",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-06-10T14:58:25.399414+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2486644"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516915337",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-11675"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2486644",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2486644"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-11675",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-11675"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11675",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-11675"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516915337",
      "url" : "https://issues.chromium.org/issues/516915337"
    } ],
    "release_date" : "2026-06-08T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia"
  }, {
    "cve" : "CVE-2026-13780",
    "discovery_date" : "2026-07-01T23:20:39.052190+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495520"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514769383",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13780"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495520",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495520"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13780",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13780"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13780",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13780"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/514769383",
      "url" : "https://issues.chromium.org/issues/514769383"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-13781",
    "cwe" : {
      "id" : "CWE-807",
      "name" : "Reliance on Untrusted Inputs in a Security Decision"
    },
    "discovery_date" : "2026-07-01T23:20:39.052200+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495660"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516457532",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13781"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495660",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495660"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13781",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13781"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13781",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13781"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516457532",
      "url" : "https://issues.chromium.org/issues/516457532"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia"
  }, {
    "cve" : "CVE-2026-13819",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-01T23:20:39.052608+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495802"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=512962749",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13819"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495802",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495802"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13819",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13819"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13819",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13819"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/512962749",
      "url" : "https://issues.chromium.org/issues/512962749"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "LOW",
        "baseScore" : 6.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:L",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-13820",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-01T23:20:39.052617+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495595"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=512986879",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13820"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495595",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495595"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13820",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13820"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13820",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13820"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/512986879",
      "url" : "https://issues.chromium.org/issues/512986879"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia"
  }, {
    "cve" : "CVE-2026-13833",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-01T23:20:39.052763+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495688"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513920082",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13833"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495688",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495688"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13833",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13833"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13833",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13833"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513920082",
      "url" : "https://issues.chromium.org/issues/513920082"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-13834",
    "cwe" : {
      "id" : "CWE-349",
      "name" : "Acceptance of Extraneous Untrusted Data With Trusted Data"
    },
    "discovery_date" : "2026-07-01T23:20:39.052787+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495701"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513925114",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13834"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495701",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495701"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13834",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13834"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13834",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13834"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513925114",
      "url" : "https://issues.chromium.org/issues/513925114"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-13841",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-07-01T23:20:39.052882+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495548"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=515467789",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13841"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495548",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495548"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13841",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13841"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13841",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13841"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/515467789",
      "url" : "https://issues.chromium.org/issues/515467789"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-13859",
    "cwe" : {
      "id" : "CWE-653",
      "name" : "Improper Isolation or Compartmentalization"
    },
    "discovery_date" : "2026-07-01T23:20:39.053110+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495632"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=484756087",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13859"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495632",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495632"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13859",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13859"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13859",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13859"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/484756087",
      "url" : "https://issues.chromium.org/issues/484756087"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-13877",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-07-01T23:20:39.053308+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495747"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498820206",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13877"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495747",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495747"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13877",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13877"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13877",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13877"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498820206",
      "url" : "https://issues.chromium.org/issues/498820206"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.0,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-13883",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-07-01T23:20:39.053363+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495732"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A type confusion flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500030250",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Type Confusion in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13883"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495732",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495732"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13883",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13883"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13883",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13883"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500030250",
      "url" : "https://issues.chromium.org/issues/500030250"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Type Confusion in ANGLE"
  }, {
    "cve" : "CVE-2026-13885",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-01T23:20:39.053387+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495605"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500474409",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13885"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495605",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495605"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13885",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13885"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13885",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13885"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500474409",
      "url" : "https://issues.chromium.org/issues/500474409"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-13971",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-01T23:20:39.054266+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495557"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513780208",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13971"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495557",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495557"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13971",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13971"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13971",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13971"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513780208",
      "url" : "https://issues.chromium.org/issues/513780208"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.7,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia"
  }, {
    "cve" : "CVE-2026-13975",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-01T23:20:39.054296+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495770"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513857658",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-13975"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495770",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495770"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-13975",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-13975"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13975",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-13975"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513857658",
      "url" : "https://issues.chromium.org/issues/513857658"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.7,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-14044",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-01T23:20:39.054929+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495510"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497670996",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14044"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495510",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495510"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14044",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14044"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14044",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14044"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497670996",
      "url" : "https://issues.chromium.org/issues/497670996"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 3.5,
        "baseSeverity" : "LOW",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Low"
    } ],
    "title" : "chromium-browser: angle: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-14125",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-01T23:20:39.055667+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495603"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513918431",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14125"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495603",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495603"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14125",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14125"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14125",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14125"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513918431",
      "url" : "https://issues.chromium.org/issues/513918431"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Low"
    } ],
    "title" : "chromium-browser: angle: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-14152",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-01T23:20:39.055914+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2495718"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517534944",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14152"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2495718",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2495718"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14152",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14152"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14152",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14152"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517534944",
      "url" : "https://issues.chromium.org/issues/517534944"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 0.0,
        "baseSeverity" : "NONE",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Low"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-14382",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-07-01T23:20:39.052297+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496296"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=250000\nhttps://code.google.com/p/chromium/issues/detail?id=492218546",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14382"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496296",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496296"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14382",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14382"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14382",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14382"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/492218546",
      "url" : "https://issues.chromium.org/issues/492218546"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 9.3,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-14384",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-01T23:20:39.053233+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496301"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497543485",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14384"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496301",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496301"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14384",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14384"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14384",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14384"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497543485",
      "url" : "https://issues.chromium.org/issues/497543485"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-14385",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-01T23:20:39.052312+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496274"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499006005",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14385"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496274",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496274"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14385",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14385"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14385",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14385"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499006005",
      "url" : "https://issues.chromium.org/issues/499006005"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-14386",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-01T23:20:39.052396+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496310"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=499047960",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14386"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496310",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496310"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14386",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14386"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14386",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14386"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/499047960",
      "url" : "https://issues.chromium.org/issues/499047960"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-14387",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-07-01T23:20:39.053379+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496275"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500305404",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14387"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496275",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496275"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14387",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14387"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14387",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14387"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500305404",
      "url" : "https://issues.chromium.org/issues/500305404"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.1,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-14388",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-01T23:20:39.053407+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496280"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500476886",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14388"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496280",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496280"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14388",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14388"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14388",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14388"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500476886",
      "url" : "https://issues.chromium.org/issues/500476886"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-14389",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-07-01T23:20:39.053414+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496264"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500505046",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14389"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496264",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496264"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14389",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14389"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14389",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14389"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500505046",
      "url" : "https://issues.chromium.org/issues/500505046"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia"
  }, {
    "cve" : "CVE-2026-14390",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-01T23:20:39.052476+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496277"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=503054174",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14390"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496277",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496277"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14390",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14390"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14390",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14390"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/503054174",
      "url" : "https://issues.chromium.org/issues/503054174"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-14391",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-07-01T23:20:39.053117+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496297"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=506212452",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14391"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496297",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496297"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14391",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14391"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14391",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14391"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/506212452",
      "url" : "https://issues.chromium.org/issues/506212452"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.0,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-14396",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-01T23:20:39.052582+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496271"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=511737097",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14396"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496271",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496271"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14396",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14396"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14396",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14396"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/511737097",
      "url" : "https://issues.chromium.org/issues/511737097"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-14397",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-01T23:20:39.053747+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496291"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=511772608",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14397"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496291",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496291"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14397",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14397"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14397",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14397"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/511772608",
      "url" : "https://issues.chromium.org/issues/511772608"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-14398",
    "cwe" : {
      "id" : "CWE-772",
      "name" : "Missing Release of Resource after Effective Lifetime"
    },
    "discovery_date" : "2026-07-01T23:20:39.052140+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496294"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=512995785",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14398"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496294",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496294"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14398",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14398"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14398",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14398"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/512995785",
      "url" : "https://issues.chromium.org/issues/512995785"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-14400",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-01T23:20:39.052625+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496258"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513010645",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14400"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496258",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496258"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14400",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14400"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14400",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14400"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513010645",
      "url" : "https://issues.chromium.org/issues/513010645"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-14401",
    "cwe" : {
      "id" : "CWE-653",
      "name" : "Improper Isolation or Compartmentalization"
    },
    "discovery_date" : "2026-07-01T23:20:39.052635+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496273"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513048822",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14401"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496273",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496273"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14401",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14401"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14401",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14401"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513048822",
      "url" : "https://issues.chromium.org/issues/513048822"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-14402",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-01T23:20:39.052642+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496302"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513051340",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14402"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496302",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496302"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14402",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14402"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14402",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14402"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513051340",
      "url" : "https://issues.chromium.org/issues/513051340"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-14410",
    "cwe" : {
      "id" : "CWE-1021",
      "name" : "Improper Restriction of Rendered UI Layers or Frames"
    },
    "discovery_date" : "2026-07-01T23:20:39.055645+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496282"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513836996",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14410"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496282",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496282"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14410",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14410"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14410",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14410"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513836996",
      "url" : "https://issues.chromium.org/issues/513836996"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "NONE",
        "baseScore" : 2.8,
        "baseSeverity" : "LOW",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Low"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia"
  }, {
    "cve" : "CVE-2026-14411",
    "cwe" : {
      "id" : "CWE-807",
      "name" : "Reliance on Untrusted Inputs in a Security Decision"
    },
    "discovery_date" : "2026-07-01T23:20:39.052754+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496309"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513919827",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14411"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496309",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496309"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14411",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14411"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14411",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14411"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513919827",
      "url" : "https://issues.chromium.org/issues/513919827"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-14412",
    "cwe" : {
      "id" : "CWE-501",
      "name" : "Trust Boundary Violation"
    },
    "discovery_date" : "2026-07-01T23:20:39.052773+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496312"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513920834",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14412"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496312",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496312"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14412",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14412"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14412",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14412"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513920834",
      "url" : "https://issues.chromium.org/issues/513920834"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-14413",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-01T23:20:39.052780+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496305"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513922055",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14413"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496305",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496305"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14413",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14413"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14413",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14413"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513922055",
      "url" : "https://issues.chromium.org/issues/513922055"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-14414",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-07-01T23:20:39.054332+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496263"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513948227",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14414"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496263",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496263"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14414",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14414"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14414",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14414"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513948227",
      "url" : "https://issues.chromium.org/issues/513948227"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.0,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia"
  }, {
    "cve" : "CVE-2026-14418",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-01T23:20:39.052898+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496295"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516865345",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14418"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496295",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496295"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14418",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14418"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14418",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14418"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516865345",
      "url" : "https://issues.chromium.org/issues/516865345"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-14419",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-01T23:20:39.052241+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496283"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516981393",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14419"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496283",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496283"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14419",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14419"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14419",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14419"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516981393",
      "url" : "https://issues.chromium.org/issues/516981393"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-14425",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-01T23:20:39.052994+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496286"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517935753",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14425"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496286",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496286"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14425",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14425"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14425",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14425"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517935753",
      "url" : "https://issues.chromium.org/issues/517935753"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-14427",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-01T23:20:39.052273+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496308"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A heap buffer overflow flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=520113415",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14427"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496308",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496308"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14427",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14427"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14427",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14427"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/520113415",
      "url" : "https://issues.chromium.org/issues/520113415"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia"
  }, {
    "cve" : "CVE-2026-14429",
    "cwe" : {
      "id" : "CWE-1289",
      "name" : "Improper Validation of Unsafe Equivalence in Input"
    },
    "discovery_date" : "2026-07-01T23:20:39.053019+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2496304"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=520571816",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-14429"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2496304",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2496304"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-14429",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-14429"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14429",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-14429"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html",
      "url" : "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/520571816",
      "url" : "https://issues.chromium.org/issues/520571816"
    } ],
    "release_date" : "2026-06-30T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia"
  }, {
    "cve" : "CVE-2026-15109",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-08T23:02:09.776056+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2498347"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516899138",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-15109"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2498347",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2498347"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15109",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15109"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15109",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15109"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516899138",
      "url" : "https://issues.chromium.org/issues/516899138"
    } ],
    "release_date" : "2026-07-08T22:35:59.565000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-15766",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-14T21:02:28.065276+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2500647"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514010477",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-15766"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2500647",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2500647"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15766",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15766"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15766",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15766"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/514010477",
      "url" : "https://issues.chromium.org/issues/514010477"
    } ],
    "release_date" : "2026-07-14T20:09:51.248000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia"
  }, {
    "cve" : "CVE-2026-15774",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-14T21:04:57.815303+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2500689"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=530646115",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-15774"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2500689",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2500689"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15774",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15774"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15774",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15774"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/530646115",
      "url" : "https://issues.chromium.org/issues/530646115"
    } ],
    "release_date" : "2026-07-14T20:09:54.494000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-16413",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-21T23:02:57.993631+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2505974"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component of Chromium. A remote attacker who has compromised the renderer process could exploit an out-of-bounds write vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to escape the sandbox, leading to further system compromise.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Chromium: Sandbox escape via out-of-bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-16413"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2505974",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2505974"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-16413",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-16413"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-16413",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-16413"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0256605430.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0256605430.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517359779",
      "url" : "https://issues.chromium.org/issues/517359779"
    } ],
    "release_date" : "2026-07-21T22:04:07.376000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Chromium: Sandbox escape via out-of-bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-16417",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-21T23:01:48.322205+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2505966"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Skia, a 2D graphics library used in Chromium. A remote attacker, after compromising the renderer process, could exploit an uninitialized use vulnerability by crafting a malicious HTML page. This could lead to the leakage of sensitive cross-origin data, potentially exposing information from other websites or applications.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-16417"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2505966",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2505966"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-16417",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-16417"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-16417",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-16417"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0256605430.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0256605430.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/521491024",
      "url" : "https://issues.chromium.org/issues/521491024"
    } ],
    "release_date" : "2026-07-21T22:04:09.379000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Skia"
  }, {
    "cve" : "CVE-2026-16419",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-21T23:03:10.093369+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2505976"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Google Chrome's ANGLE component on Android. A remote attacker could exploit an out-of-bounds memory access vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to escape the browser's security sandbox, leading to further compromise of the system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-16419"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2505976",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2505976"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-16419",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-16419"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-16419",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-16419"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0256605430.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0256605430.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/523435970",
      "url" : "https://issues.chromium.org/issues/523435970"
    } ],
    "release_date" : "2026-07-21T22:04:10.114000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access"
  }, {
    "cve" : "CVE-2026-17653",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-30T01:14:59.202780+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508987"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=520514458",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17653"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508987",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508987"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17653",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17653"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17653",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17653"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/520514458",
      "url" : "https://issues.chromium.org/issues/520514458"
    } ],
    "release_date" : "2026-07-30T00:18:43.352000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-17655",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-07-30T01:11:21.366329+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508906"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=522556145",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17655"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508906",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508906"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17655",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17655"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17655",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17655"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/522556145",
      "url" : "https://issues.chromium.org/issues/522556145"
    } ],
    "release_date" : "2026-07-30T00:18:44.004000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-17667",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:04:45.267460+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508767"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513043537",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17667"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508767",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508767"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17667",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17667"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17667",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17667"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513043537",
      "url" : "https://issues.chromium.org/issues/513043537"
    } ],
    "release_date" : "2026-07-30T00:18:47.707000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-17668",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:08:53.399879+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508852"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513134019",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17668"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508852",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508852"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17668",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17668"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17668",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17668"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513134019",
      "url" : "https://issues.chromium.org/issues/513134019"
    } ],
    "release_date" : "2026-07-30T00:18:47.986000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-17671",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-07-30T01:14:38.299255+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508979"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513257423",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17671"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508979",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508979"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17671",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17671"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17671",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17671"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513257423",
      "url" : "https://issues.chromium.org/issues/513257423"
    } ],
    "release_date" : "2026-07-30T00:18:48.870000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-17675",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-30T01:02:42.247241+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508724"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513920258",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17675"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508724",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508724"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17675",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17675"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17675",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17675"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513920258",
      "url" : "https://issues.chromium.org/issues/513920258"
    } ],
    "release_date" : "2026-07-30T00:18:49.940000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-17676",
    "cwe" : {
      "id" : "CWE-501",
      "name" : "Trust Boundary Violation"
    },
    "discovery_date" : "2026-07-30T01:02:20.594224+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508716"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513920298",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17676"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508716",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508716"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17676",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17676"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17676",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17676"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513920298",
      "url" : "https://issues.chromium.org/issues/513920298"
    } ],
    "release_date" : "2026-07-30T00:18:50.225000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-17677",
    "cwe" : {
      "id" : "CWE-501",
      "name" : "Trust Boundary Violation"
    },
    "discovery_date" : "2026-07-30T01:14:16.948931+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508971"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513921488",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17677"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508971",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508971"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17677",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17677"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17677",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17677"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513921488",
      "url" : "https://issues.chromium.org/issues/513921488"
    } ],
    "release_date" : "2026-07-30T00:18:50.499000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-17678",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-30T01:08:09.967034+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508836"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=515452019",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17678"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508836",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508836"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17678",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17678"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17678",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17678"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/515452019",
      "url" : "https://issues.chromium.org/issues/515452019"
    } ],
    "release_date" : "2026-07-30T00:18:50.788000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-17682",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-07-30T01:14:27.706477+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508975"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516837126",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17682"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508975",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508975"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17682",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17682"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17682",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17682"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516837126",
      "url" : "https://issues.chromium.org/issues/516837126"
    } ],
    "release_date" : "2026-07-30T00:18:51.893000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-17683",
    "cwe" : {
      "id" : "CWE-497",
      "name" : "Exposure of Sensitive System Information to an Unauthorized Control Sphere"
    },
    "discovery_date" : "2026-07-30T01:01:40.364349+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508701"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516887576",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17683"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508701",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508701"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17683",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17683"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17683",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17683"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516887576",
      "url" : "https://issues.chromium.org/issues/516887576"
    } ],
    "release_date" : "2026-07-30T00:18:52.191000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-17687",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-07-30T01:08:45.233801+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508849"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A type confusion flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516985726",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: ANGLE: angle: chromium-browser: Type Confusion in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17687"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508849",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508849"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17687",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17687"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17687",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17687"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516985726",
      "url" : "https://issues.chromium.org/issues/516985726"
    } ],
    "release_date" : "2026-07-30T00:18:53.310000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: ANGLE: angle: chromium-browser: Type Confusion in ANGLE"
  }, {
    "cve" : "CVE-2026-17689",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:15:50.867485+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2509006"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517045160",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17689"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2509006",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2509006"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17689",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17689"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17689",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17689"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517045160",
      "url" : "https://issues.chromium.org/issues/517045160"
    } ],
    "release_date" : "2026-07-30T00:18:54.018000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-17691",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-30T01:06:44.769492+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508807"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517321292",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17691"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508807",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508807"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17691",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17691"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17691",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17691"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517321292",
      "url" : "https://issues.chromium.org/issues/517321292"
    } ],
    "release_date" : "2026-07-30T00:18:54.565000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-17695",
    "cwe" : {
      "id" : "CWE-501",
      "name" : "Trust Boundary Violation"
    },
    "discovery_date" : "2026-07-30T01:10:17.824385+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508883"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517543052",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17695"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508883",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508883"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17695",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17695"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17695",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17695"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517543052",
      "url" : "https://issues.chromium.org/issues/517543052"
    } ],
    "release_date" : "2026-07-30T00:18:55.713000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE"
  }, {
    "cve" : "CVE-2026-17697",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-07-30T01:15:43.107633+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2509003"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A type confusion flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517575864",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Type Confusion in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17697"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2509003",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2509003"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17697",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17697"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17697",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17697"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517575864",
      "url" : "https://issues.chromium.org/issues/517575864"
    } ],
    "release_date" : "2026-07-30T00:18:56.265000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Type Confusion in ANGLE"
  }, {
    "cve" : "CVE-2026-17701",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-07-30T01:07:04.583294+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508812"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517972648",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17701"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508812",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508812"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17701",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17701"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17701",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17701"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517972648",
      "url" : "https://issues.chromium.org/issues/517972648"
    } ],
    "release_date" : "2026-07-30T00:18:57.474000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds read in ANGLE"
  }, {
    "cve" : "CVE-2026-17702",
    "cwe" : {
      "id" : "CWE-346",
      "name" : "Origin Validation Error"
    },
    "discovery_date" : "2026-07-30T01:01:02.860199+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508687"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An inappropriate implementation flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517973093",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17702"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508687",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508687"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17702",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17702"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17702",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17702"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517973093",
      "url" : "https://issues.chromium.org/issues/517973093"
    } ],
    "release_date" : "2026-07-30T00:18:57.742000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia"
  }, {
    "cve" : "CVE-2026-17704",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-30T01:05:16.135924+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508778"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=519259107",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17704"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508778",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508778"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17704",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17704"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17704",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17704"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/519259107",
      "url" : "https://issues.chromium.org/issues/519259107"
    } ],
    "release_date" : "2026-07-30T00:18:58.321000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-17712",
    "cwe" : {
      "id" : "CWE-368",
      "name" : "Context Switching Race Condition"
    },
    "discovery_date" : "2026-07-30T01:12:56.914053+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508941"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A race flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=520535595",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Race in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17712"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508941",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508941"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17712",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17712"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17712",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17712"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/520535595",
      "url" : "https://issues.chromium.org/issues/520535595"
    } ],
    "release_date" : "2026-07-30T00:19:00.587000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Race in Skia"
  }, {
    "cve" : "CVE-2026-17714",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:14:46.068558+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508982"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=521293438",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17714"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508982",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508982"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17714",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17714"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17714",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17714"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/521293438",
      "url" : "https://issues.chromium.org/issues/521293438"
    } ],
    "release_date" : "2026-07-30T00:19:01.167000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-17717",
    "cwe" : {
      "id" : "CWE-190",
      "name" : "Integer Overflow or Wraparound"
    },
    "discovery_date" : "2026-07-30T01:08:01.995059+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508833"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An integer overflow flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=522063116",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17717"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508833",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508833"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17717",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17717"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17717",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17717"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/522063116",
      "url" : "https://issues.chromium.org/issues/522063116"
    } ],
    "release_date" : "2026-07-30T00:19:02.026000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Integer overflow in ANGLE"
  }, {
    "cve" : "CVE-2026-17718",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-30T01:01:56.477253+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508707"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=522079372",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17718"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508707",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508707"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17718",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17718"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17718",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17718"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/522079372",
      "url" : "https://issues.chromium.org/issues/522079372"
    } ],
    "release_date" : "2026-07-30T00:19:02.311000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-17721",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-07-30T01:02:12.468676+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508713"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=523495723",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17721"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508713",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508713"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17721",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17721"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17721",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17721"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/523495723",
      "url" : "https://issues.chromium.org/issues/523495723"
    } ],
    "release_date" : "2026-07-30T00:19:03.139000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-17740",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:10:51.948682+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508895"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=498827800",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17740"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508895",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508895"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17740",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17740"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17740",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17740"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/498827800",
      "url" : "https://issues.chromium.org/issues/498827800"
    } ],
    "release_date" : "2026-07-30T00:19:08.657000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-17745",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-30T01:10:20.726386+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508884"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500172224",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17745"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508884",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508884"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17745",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17745"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17745",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17745"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500172224",
      "url" : "https://issues.chromium.org/issues/500172224"
    } ],
    "release_date" : "2026-07-30T00:19:09.988000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia"
  }, {
    "cve" : "CVE-2026-17750",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-30T01:06:08.189105+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508795"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=500560234",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17750"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508795",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508795"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17750",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17750"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17750",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17750"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/500560234",
      "url" : "https://issues.chromium.org/issues/500560234"
    } ],
    "release_date" : "2026-07-30T00:19:11.362000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-17757",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:02:47.578329+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508726"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=502351526",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17757"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508726",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508726"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17757",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17757"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17757",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17757"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/502351526",
      "url" : "https://issues.chromium.org/issues/502351526"
    } ],
    "release_date" : "2026-07-30T00:19:13.250000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia"
  }, {
    "cve" : "CVE-2026-17771",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:13:18.391565+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508949"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513160525",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17771"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508949",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508949"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17771",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17771"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17771",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17771"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513160525",
      "url" : "https://issues.chromium.org/issues/513160525"
    } ],
    "release_date" : "2026-07-30T00:19:16.714000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia"
  }, {
    "cve" : "CVE-2026-17785",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:14:48.693544+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508983"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513769898",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17785"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508983",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508983"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17785",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17785"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17785",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17785"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513769898",
      "url" : "https://issues.chromium.org/issues/513769898"
    } ],
    "release_date" : "2026-07-30T00:19:20.535000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-17790",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-07-30T01:13:21.066568+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508951"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized use flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=513919931",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17790"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508951",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508951"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17790",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17790"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17790",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17790"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513919931",
      "url" : "https://issues.chromium.org/issues/513919931"
    } ],
    "release_date" : "2026-07-30T00:19:21.886000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE"
  }, {
    "cve" : "CVE-2026-17801",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-07-30T01:04:31.268753+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508762"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514482938",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Out of bounds memory access in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17801"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508762",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508762"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17801",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17801"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17801",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17801"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/514482938",
      "url" : "https://issues.chromium.org/issues/514482938"
    } ],
    "release_date" : "2026-07-30T00:19:25.308000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "LOW",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Out of bounds memory access in ANGLE"
  }, {
    "cve" : "CVE-2026-17811",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-30T01:03:22.376581+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508739"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=516954622",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17811"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508739",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508739"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17811",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17811"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17811",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17811"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516954622",
      "url" : "https://issues.chromium.org/issues/516954622"
    } ],
    "release_date" : "2026-07-30T00:19:28.146000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-17832",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-30T01:01:21.598033+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508694"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=517723319",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17832"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508694",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508694"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17832",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17832"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17832",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17832"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517723319",
      "url" : "https://issues.chromium.org/issues/517723319"
    } ],
    "release_date" : "2026-07-30T00:19:33.921000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-17847",
    "cwe" : {
      "id" : "CWE-1286",
      "name" : "Improper Validation of Syntactic Correctness of Input"
    },
    "discovery_date" : "2026-07-30T01:03:11.881166+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508735"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=518243653",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17847"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508735",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508735"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17847",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17847"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17847",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17847"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/518243653",
      "url" : "https://issues.chromium.org/issues/518243653"
    } ],
    "release_date" : "2026-07-30T00:19:37.958000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "LOW",
        "baseScore" : 7.1,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE"
  }, {
    "cve" : "CVE-2026-17891",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-07-30T01:14:03.438430+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508966"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the ANGLE component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=524639223",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17891"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508966",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508966"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17891",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17891"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17891",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17891"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/524639223",
      "url" : "https://issues.chromium.org/issues/524639223"
    } ],
    "release_date" : "2026-07-30T00:19:49.929000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "LOW",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Use after free in ANGLE"
  }, {
    "cve" : "CVE-2026-17914",
    "cwe" : {
      "id" : "CWE-205",
      "name" : "Observable Behavioral Discrepancy"
    },
    "discovery_date" : "2026-07-30T01:05:01.215950+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2508773"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A side-channel information leakage flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=506377118",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-17914"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2508773",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508773"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-17914",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-17914"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17914",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-17914"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html",
      "url" : "https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/506377118",
      "url" : "https://issues.chromium.org/issues/506377118"
    } ],
    "release_date" : "2026-07-30T00:25:25.650000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Low"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia"
  }, {
    "cve" : "CVE-2026-19154",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-08-06T22:23:21.337345+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2512231"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An use after free flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=532941869",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: Use after free in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-19154"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2512231",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512231"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-19154",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-19154"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19154",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19154"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/532941869",
      "url" : "https://issues.chromium.org/issues/532941869"
    } ],
    "release_date" : "2026-08-06T20:33:39.289000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: Use after free in Skia"
  }, {
    "cve" : "CVE-2026-19157",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-06T22:27:30.802768+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2512296"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component within Google Chrome on Android. This out-of-bounds write vulnerability allows a remote attacker to potentially perform a sandbox escape by enticing a user to visit a specially crafted HTML page. This could lead to an attacker executing arbitrary code outside the browser's security sandbox.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This Important flaw in the ANGLE component of Chromium allows a remote attacker to achieve a sandbox escape. Exploitation requires user interaction, where a victim must visit a specially crafted HTML page, enabling an attacker to execute arbitrary code outside the browser's security sandbox. This bypasses security boundaries, leading to potential compromise of the underlying system.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-19157"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2512296",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512296"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-19157",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-19157"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19157",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19157"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/534903095",
      "url" : "https://issues.chromium.org/issues/534903095"
    } ],
    "release_date" : "2026-08-06T20:33:40.062000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "HIGH",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android"
  }, {
    "cve" : "CVE-2026-19160",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-08-06T22:30:11.588230+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2512341"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an uninitialized use vulnerability by crafting a malicious HTML page. This could lead to the disclosure of sensitive cross-origin data.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "A moderate severity information disclosure flaw was found in Skia, the 2D graphics library used by Google Chrome and by WebKitGTK in Red Hat Enterprise Linux. An uninitialized memory use in Skia allows a remote attacker who has already compromised the browser's renderer process to leak cross-origin data when a user visits a crafted HTML page. Red Hat assessed this flaw as having moderate impact rather than upstream's High rating because exploitation requires the attacker to have already compromised the renderer process, so the flaw primarily enables information disclosure across the same-origin policy boundary rather than an initial compromise. In Red Hat Enterprise Linux 7, 8, and 9, the webkit2gtk3 and webkitgtk4 components that bundle Skia are affected, and fixes are being pursued through the upstream WebKitGTK project; Red Hat's Firefox and Thunderbird packages are not affected because the vulnerable code is not present in the Skia copies they ship. The chromium package in Fedora and EPEL (Community Projects) is also affected, with updates handled through the community channels.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-19160"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2512341",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512341"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-19160",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-19160"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19160",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19160"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536068737",
      "url" : "https://issues.chromium.org/issues/536068737"
    } ],
    "release_date" : "2026-08-06T20:33:51.346000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome"
  }, {
    "cve" : "CVE-2026-19161",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-08-06T22:26:55.493300+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2512287"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Skia in Google Chrome. This uninitialized use vulnerability allows a remote attacker, who has already compromised the renderer process, to craft a malicious HTML page. Successful exploitation can lead to the leakage of sensitive cross-origin data.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "A flaw of important impact was found in Skia, the graphics library used by Chromium and bundled in WebKit-based rendering engines. Uninitialized memory use in Skia allows a remote attacker who has already compromised the renderer process to leak sensitive cross-origin data when the victim views a crafted HTML page, bypassing the same-origin policy and exposing confidential data across origins. In Red Hat Enterprise Linux the flaw is reachable through the webkit2gtk3 component, and a fix is being pursued for the affected streams. Firefox in Red Hat Enterprise Linux is not affected because the vulnerable code is not in the execute path, and Thunderbird and the webkitgtk4 package in Red Hat Enterprise Linux 7 are not affected because the vulnerable code is not present. The community-maintained chromium and webkitgtk packages in Fedora and EPEL are also affected, and fixes are pursued through those channels. Red Hat rated this flaw Important (CVSS 7.4), which is consistent with the upstream Chromium severity of High; CISA assigned a lower CVSS score (3.1, Low), reflecting high attack complexity, low confidentiality impact, and unchanged scope in its vector.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-19161"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2512287",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512287"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-19161",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-19161"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19161",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19161"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536165038",
      "url" : "https://issues.chromium.org/issues/536165038"
    } ],
    "release_date" : "2026-08-06T20:33:51.773000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use"
  }, {
    "cve" : "CVE-2026-19173",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-06T22:26:17.163407+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2512277"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds write flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=538332338",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-19173"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2512277",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512277"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-19173",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-19173"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19173",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19173"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/538332338",
      "url" : "https://issues.chromium.org/issues/538332338"
    } ],
    "release_date" : "2026-08-06T20:33:55.259000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.0,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia"
  }, {
    "cve" : "CVE-2026-19176",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-08-06T22:31:32.901357+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2512360"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment, potentially allowing further system compromise.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "An IMPORTANT severity use-after-free flaw was found in Skia, a 2D graphics library used for graphics rendering in web browsers and email clients, affecting multiple Red Hat products. A remote attacker who has already compromised the renderer process of an application using Skia could exploit this flaw by tricking a user into loading a specially crafted HTML page, triggering a use-after-free that allows the attacker to execute arbitrary code within the application's sandbox and potentially achieve further system compromise. Because exploitation requires the attacker to already control the renderer process, Red Hat scores this flaw with a local attack vector and scope change (CVSS 8.2, IMPORTANT), while upstream Google rates the corresponding Chromium issue as High severity. Red Hat products that bundle affected Skia code are impacted, including the chromium, firefox, thunderbird, and webkitgtk component families across Red Hat Enterprise Linux, Fedora, and EPEL; Thunderbird in the RHEL 8 BRP is not affected. Fixes for the affected products are being pursued.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-19176"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2512360",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2512360"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-19176",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-19176"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19176",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-19176"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/540157141",
      "url" : "https://issues.chromium.org/issues/540157141"
    } ],
    "release_date" : "2026-08-06T20:33:56.628000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page"
  }, {
    "cve" : "CVE-2026-28984",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-20T12:52:08.556000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2520315"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-28984"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2520315",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520315"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-28984",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-28984"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-28984",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-28984"
    }, {
      "category" : "external",
      "summary" : "https://webkitgtk.org/security/WSA-2026-0005.html",
      "url" : "https://webkitgtk.org/security/WSA-2026-0005.html"
    } ],
    "release_date" : "2026-08-20T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-43795",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:12:35.319013+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524566"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43795"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524566",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524566"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43795",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43795"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43795",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43795"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:31:14.573000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-43804",
    "cwe" : {
      "id" : "CWE-664",
      "name" : "Improper Control of a Resource Through its Lifetime"
    },
    "discovery_date" : "2026-08-20T12:52:32.956000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2520316"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Visiting a malicious website can cause an application denial of service due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Visiting a website may lead to an app denial-of-service",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. Due to this reason, this flaw has been rated with a moderate severity.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43804"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2520316",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520316"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43804",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43804"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43804",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43804"
    }, {
      "category" : "external",
      "summary" : "https://webkitgtk.org/security/WSA-2026-0005.html",
      "url" : "https://webkitgtk.org/security/WSA-2026-0005.html"
    } ],
    "release_date" : "2026-08-20T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not visit untrusted websites or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "webkitgtk: Visiting a website may lead to an app denial-of-service"
  }, {
    "cve" : "CVE-2026-64713",
    "cwe" : {
      "id" : "CWE-200",
      "name" : "Exposure of Sensitive Information to an Unauthorized Actor"
    },
    "discovery_date" : "2026-08-20T12:52:44.233000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2520317"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Visiting a website allows malicious web content to know if a user has visited a given link due to improper checks.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Websites may know if the user has visited a given link",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. Due to this reason, this flaw has been rated with a moderate severity.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64713"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2520317",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520317"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64713",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64713"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64713",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64713"
    }, {
      "category" : "external",
      "summary" : "https://webkitgtk.org/security/WSA-2026-0005.html",
      "url" : "https://webkitgtk.org/security/WSA-2026-0005.html"
    } ],
    "release_date" : "2026-08-20T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not visit untrusted websites or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "webkitgtk: Websites may know if the user has visited a given link"
  }, {
    "cve" : "CVE-2026-64715",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2026-08-26T17:12:39.011837+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524567"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64715"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524567",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524567"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64715",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64715"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64715",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64715"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:29:27.827000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
  }, {
    "cve" : "CVE-2026-64718",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2026-08-26T17:12:43.874456+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524568"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64718"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524568",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524568"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64718",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64718"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64718",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64718"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/128066",
      "url" : "https://support.apple.com/en-us/128066"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/128067",
      "url" : "https://support.apple.com/en-us/128067"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/128068",
      "url" : "https://support.apple.com/en-us/128068"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/128069",
      "url" : "https://support.apple.com/en-us/128069"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/128070",
      "url" : "https://support.apple.com/en-us/128070"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/128073",
      "url" : "https://support.apple.com/en-us/128073"
    } ],
    "release_date" : "2026-07-27T20:12:07.210000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-64728",
    "cwe" : {
      "id" : "CWE-693",
      "name" : "Protection Mechanism Failure"
    },
    "discovery_date" : "2026-08-20T12:53:05.503000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2520319"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can violate the iframe sandboxing policy due to improper validation.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with a moderate severity.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64728"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2520319",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520319"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64728",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64728"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64728",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64728"
    }, {
      "category" : "external",
      "summary" : "https://webkitgtk.org/security/WSA-2026-0005.html",
      "url" : "https://webkitgtk.org/security/WSA-2026-0005.html"
    } ],
    "release_date" : "2026-08-20T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy"
  }, {
    "cve" : "CVE-2026-64730",
    "cwe" : {
      "id" : "CWE-451",
      "name" : "User Interface (UI) Misrepresentation of Critical Information"
    },
    "discovery_date" : "2026-08-20T12:53:15.786000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2520321"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. Due to this reason, this flaw has been rated with a moderate severity.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64730"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2520321",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520321"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64730",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64730"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64730",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64730"
    }, {
      "category" : "external",
      "summary" : "https://webkitgtk.org/security/WSA-2026-0005.html",
      "url" : "https://webkitgtk.org/security/WSA-2026-0005.html"
    } ],
    "release_date" : "2026-08-20T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not visit untrusted websites or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing"
  }, {
    "cve" : "CVE-2026-64753",
    "cwe" : {
      "id" : "CWE-359",
      "name" : "Exposure of Private Personal Information to an Unauthorized Actor"
    },
    "discovery_date" : "2026-09-16T16:06:29.943285+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2535532"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to a permission issue.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may disclose sensitive user information",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this vulnerability, an attacker needs to trick a user into processing or loading malicious web content.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64753"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2535532",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2535532"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64753",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64753"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64753",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64753"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/149034",
      "url" : "https://support.apple.com/en-us/149034"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/149035",
      "url" : "https://support.apple.com/en-us/149035"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/149036",
      "url" : "https://support.apple.com/en-us/149036"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/149037",
      "url" : "https://support.apple.com/en-us/149037"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/149038",
      "url" : "https://support.apple.com/en-us/149038"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/149039",
      "url" : "https://support.apple.com/en-us/149039"
    } ],
    "release_date" : "2026-09-14T20:48:40.978000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may disclose sensitive user information"
  }, {
    "cve" : "CVE-2026-64757",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-20T13:04:44.130000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2520322"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64757"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2520322",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520322"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64757",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64757"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64757",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64757"
    }, {
      "category" : "external",
      "summary" : "https://webkitgtk.org/security/WSA-2026-0005.html",
      "url" : "https://webkitgtk.org/security/WSA-2026-0005.html"
    } ],
    "release_date" : "2026-08-20T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-64778",
    "cwe" : {
      "id" : "CWE-200",
      "name" : "Exposure of Sensitive Information to an Unauthorized Actor"
    },
    "discovery_date" : "2026-08-26T17:12:48.176337+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524569"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Visiting a malicious website may lead to a sensitive data leak due to improper validation checks.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Visiting a maliciously crafted website may leak sensitive data",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this flaw, an attacker needs to trick a user into visiting a malicious website. For this reason, this flaw has been rated with a moderate severity.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64778"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524569",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524569"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64778",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64778"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64778",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64778"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:29:37.539000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not visit untrusted websites or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "webkitgtk: Visiting a maliciously crafted website may leak sensitive data"
  }, {
    "cve" : "CVE-2026-64779",
    "cwe" : {
      "id" : "CWE-667",
      "name" : "Improper Locking"
    },
    "discovery_date" : "2026-08-26T17:12:52.055145+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524570"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64779"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524570",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524570"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64779",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64779"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64779",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64779"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:29:15.067000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-64780",
    "cwe" : {
      "id" : "CWE-20",
      "name" : "Improper Input Validation"
    },
    "discovery_date" : "2026-08-26T17:12:58.111219+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524571"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper validation checks.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64780"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524571",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524571"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64780",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64780"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64780",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64780"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:29:17.121000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-64782",
    "cwe" : {
      "id" : "CWE-667",
      "name" : "Improper Locking"
    },
    "discovery_date" : "2026-08-26T17:13:07.511483+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524573"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64782"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524573",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524573"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64782",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64782"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64782",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64782"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:31:21.710000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-64783",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2026-08-20T12:53:37.256000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2520323"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64783"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2520323",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2520323"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64783",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64783"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64783",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64783"
    }, {
      "category" : "external",
      "summary" : "https://webkitgtk.org/security/WSA-2026-0005.html",
      "url" : "https://webkitgtk.org/security/WSA-2026-0005.html"
    } ],
    "release_date" : "2026-08-20T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-64784",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:12.298023+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524574"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an out-of-bounds access issue due to improper bounds checking and result in an unexpected process crash.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64784"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524574",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524574"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64784",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64784"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64784",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64784"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:30:45.212000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65331",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:17.831776+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524575"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65331"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524575",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524575"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65331",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65331"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65331",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65331"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:31:37.955000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65332",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:23.101445+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524576"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65332"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524576",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524576"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65332",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65332"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65332",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65332"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:29:09.891000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65333",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:30.156383+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524577"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65333"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524577",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524577"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65333",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65333"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65333",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65333"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:29:42.566000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65334",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:34.553047+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524578"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65334"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524578",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524578"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65334",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65334"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65334",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65334"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:30:08.305000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65335",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:40.507496+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524579"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65335"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524579",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524579"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65335",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65335"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65335",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65335"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:30:18.797000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65336",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:44.936967+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524580"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65336"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524580",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524580"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65336",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65336"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65336",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65336"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:30:49.391000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65337",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:50.462881+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524581"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65337"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524581",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524581"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65337",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65337"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65337",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65337"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:31:00.092000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65338",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:13:57.861431+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524582"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65338"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524582",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524582"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65338",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65338"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65338",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65338"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:29:59.913000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65340",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:14:02.244999+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524583"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65340"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524583",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524583"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65340",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65340"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65340",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65340"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:31:03.232000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-65341",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:14:07.755730+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524584"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65341"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524584",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524584"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65341",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65341"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65341",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65341"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148287",
      "url" : "https://support.apple.com/en-us/148287"
    } ],
    "release_date" : "2026-08-17T21:30:42.172000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
  }, {
    "cve" : "CVE-2026-65351",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-26T17:14:12.976874+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524585"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-65351"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524585",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524585"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-65351",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-65351"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65351",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-65351"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148281",
      "url" : "https://support.apple.com/en-us/148281"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148282",
      "url" : "https://support.apple.com/en-us/148282"
    }, {
      "category" : "external",
      "summary" : "https://support.apple.com/en-us/148286",
      "url" : "https://support.apple.com/en-us/148286"
    } ],
    "release_date" : "2026-08-17T21:31:25.582000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
  }, {
    "cve" : "CVE-2026-76041",
    "cwe" : {
      "id" : "CWE-346",
      "name" : "Origin Validation Error"
    },
    "discovery_date" : "2026-08-18T20:51:10.690383+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2518263"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An information leak flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=540027341",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Information leak in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-76041"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2518263",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2518263"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-76041",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-76041"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-76041",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-76041"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/540027341",
      "url" : "https://issues.chromium.org/issues/540027341"
    } ],
    "release_date" : "2026-08-18T20:31:28.156000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Avoid visiting untrusted websites or opening untrusted HTML content. Users should exercise caution when browsing the internet and only access reputable sources to reduce the risk of exploitation.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Information leak in Skia"
  }, {
    "cve" : "CVE-2026-76046",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-18T20:51:30.381419+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2518265"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security sandbox, leading to a compromise of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat rates this vulnerability as Important because an attacker can escape browser process isolation and achieve arbitrary code execution with the permissions of the local user. Although this flaw allows a sandbox escape, it is rated Important rather than Critical due to requiring user interaction to process untrusted web content alongside a previously compromised rendering engine. On Red Hat Enterprise Linux, this impact is primarily restricted to desktop environments and applications utilizing WebKitGTK, leaving default headless server installations unaffected.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-76046"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2518265",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2518265"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-76046",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-76046"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-76046",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-76046"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536581050",
      "url" : "https://issues.chromium.org/issues/536581050"
    } ],
    "release_date" : "2026-08-18T20:31:27.388000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.2,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page"
  }, {
    "acknowledgments" : [ {
      "names" : [ "Igalia" ]
    } ],
    "cve" : "CVE-2026-78376",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2026-08-24T13:01:28.703000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2521858"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: use-after-free of JSCValue function parameters",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78376"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2521858",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2521858"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78376",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78376"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78376",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78376"
    }, {
      "category" : "external",
      "summary" : "https://github.com/WebKit/WebKit/pull/72142",
      "url" : "https://github.com/WebKit/WebKit/pull/72142"
    } ],
    "release_date" : "2026-08-24T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: use-after-free of JSCValue function parameters"
  }, {
    "cve" : "CVE-2026-78904",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-08-25T20:46:11.088633+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523875"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE. A type confusion vulnerability in ANGLE, a graphics abstraction layer used in Google Chrome, allows a remote attacker to exploit the flaw. By crafting a malicious HTML page, the attacker can trigger this vulnerability. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox, compromising the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Critical severity is assigned because an attacker can achieve remote code execution that breaks out of the client sandbox, potentially compromising the host system. In Red Hat Enterprise Linux environments, exposure is primarily confined to desktop or workstation installations running applications that embed WebKitGTK to render untrusted web content. Standard server deployments without graphical rendering engines are not exposed, and standalone Mozilla applications such as Firefox and Thunderbird do not include the vulnerable ANGLE component.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78904"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523875",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523875"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78904",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78904"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78904",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78904"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/537835609",
      "url" : "https://issues.chromium.org/issues/537835609"
    } ],
    "release_date" : "2026-08-25T20:10:09.288000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page"
  }, {
    "cve" : "CVE-2026-78905",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type"
    },
    "discovery_date" : "2026-08-25T20:44:27.346376+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523858"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used in Google Chrome. This type confusion vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat rates this vulnerability as Critical impact because an unauthenticated remote attacker can escape containerized renderer isolation boundaries and execute arbitrary code on the host system. In typical Red Hat Enterprise Linux deployments, the affected graphics engine is embedded in WebKit-dependent graphical applications and desktop environments, leaving headless server installations largely unexposed. While exploitation requires user interaction to process a maliciously crafted web document, the resulting sandbox escape presents severe risk to client systems.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78905"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523858",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523858"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78905",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78905"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78905",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78905"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517245017",
      "url" : "https://issues.chromium.org/issues/517245017"
    } ],
    "release_date" : "2026-08-25T20:10:32.796000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML"
  }, {
    "cve" : "CVE-2026-78906",
    "cwe" : {
      "id" : "CWE-368",
      "name" : "Context Switching Race Condition"
    },
    "discovery_date" : "2026-08-25T21:07:03.518802+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524111"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Chromium's ANGLE component. A race condition, triggered by a specially crafted HTML page, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This could lead to a complete compromise of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via race condition in HTML processing",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this vulnerability as Important rather than Moderate because successful exploitation can break out of the browser sandbox to execute arbitrary commands with the privileges of the local user. In Red Hat Enterprise Linux environments, the affected graphics translation library is predominantly consumed by desktop utilities and web engines such as WebKitGTK, rather than exposed server services. Exploitation requires user interaction to open or render an untrusted, maliciously crafted web document, and successful code execution relies on winning a timing window in multi-threaded rendering operations.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78906"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524111",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524111"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78906",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78906"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78906",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78906"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513923164",
      "url" : "https://issues.chromium.org/issues/513923164"
    } ],
    "release_date" : "2026-08-25T20:10:29.097000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via race condition in HTML processing"
  }, {
    "cve" : "CVE-2026-78914",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-08-25T20:48:06.199151+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523904"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Skia, a 2D graphics library used in Chromium. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into opening a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, leading to information disclosure.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78914"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523904",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523904"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78914",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78914"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78914",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78914"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536166543",
      "url" : "https://issues.chromium.org/issues/536166543"
    } ],
    "release_date" : "2026-08-25T20:10:59.988000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia"
  }, {
    "cve" : "CVE-2026-78958",
    "cwe" : {
      "id" : "CWE-908",
      "name" : "Use of Uninitialized Resource"
    },
    "discovery_date" : "2026-08-25T20:51:47.873721+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523958"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An uninitialized resource flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=497205529",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: Uninitialized resource in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78958"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523958",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523958"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78958",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78958"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78958",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78958"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/497205529",
      "url" : "https://issues.chromium.org/issues/497205529"
    } ],
    "release_date" : "2026-08-25T20:10:13.032000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "NONE",
        "baseScore" : 5.9,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: Uninitialized resource in Skia"
  }, {
    "cve" : "CVE-2026-78965",
    "cwe" : {
      "id" : "CWE-908",
      "name" : "Use of Uninitialized Resource"
    },
    "discovery_date" : "2026-08-25T20:54:21.998825+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523998"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information disclosure.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat has evaluated this vulnerability as having an Important security impact because an unauthenticated remote attacker could compromise confidentiality by bypassing same-origin security boundaries to access cross-origin data. In Red Hat Enterprise Linux, this issue affects WebKitGTK when rendering web pages in graphical applications that utilize the embedded ANGLE graphics translation layer. Successful exploitation requires a user to load hostile web content, meaning that headless server installations without graphical browsing capabilities remain unaffected in standard deployment configurations.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78965"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523998",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523998"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78965",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78965"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78965",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78965"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/523723064",
      "url" : "https://issues.chromium.org/issues/523723064"
    } ],
    "release_date" : "2026-08-25T20:10:04.015000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource"
  }, {
    "cve" : "CVE-2026-78978",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-08-25T20:51:14.019723+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523950"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component within Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat rates this vulnerability as Critical because an attacker can remotely escape application confinement and execute unauthorized code under the local user context. Although standard browsers like Firefox and mail clients like Thunderbird remain unaffected, packages leveraging WebKitGTK are vulnerable when processing untrusted web content. Exploitation necessitates user interaction to open a malicious webpage, so default headless server deployments without graphical browsing software face minimal operational risk.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78978"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523950",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523950"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78978",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78978"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78978",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78978"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/520464738",
      "url" : "https://issues.chromium.org/issues/520464738"
    } ],
    "release_date" : "2026-08-25T20:10:39.304000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page"
  }, {
    "cve" : "CVE-2026-78989",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-08-25T20:34:02.805600+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523795"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component of Google Chrome on Windows. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat rates this flaw as Critical due to the severe blast radius of an unauthenticated remote code execution that escapes process isolation boundaries. While Red Hat Enterprise Linux does not distribute Google Chrome, the underlying ANGLE engine is embedded within WebKitGTK components utilized by graphical applications. Because the defect targets the Windows-specific rendering backend, standard Red Hat enterprise environments running Linux graphics subsystems are not exposed under normal operating conditions.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-78989"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523795",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523795"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-78989",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-78989"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78989",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-78989"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/532617619",
      "url" : "https://issues.chromium.org/issues/532617619"
    } ],
    "release_date" : "2026-08-25T20:09:58.957000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page"
  }, {
    "cve" : "CVE-2026-79019",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T20:48:59.053489+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523917"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a graphics abstraction layer used in Chromium-based browsers. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker can achieve arbitrary code execution outside the rendering sandbox by enticing a user to view malicious web content. In Red Hat Enterprise Linux, the affected graphics translation components are delivered through client-facing web rendering packages such as webkit2gtk3, leaving minimal and headless server deployments unaffected in default configurations. Exposure is therefore limited to environments running graphical applications or desktop sessions that process untrusted external web resources.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79019"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523917",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523917"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79019",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79019"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79019",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79019"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/523266585",
      "url" : "https://issues.chromium.org/issues/523266585"
    } ],
    "release_date" : "2026-08-25T20:10:03.276000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page"
  }, {
    "cve" : "CVE-2026-79020",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-08-25T21:06:18.343107+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524106"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=514017820",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79020"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524106",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524106"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79020",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79020"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79020",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79020"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/514017820",
      "url" : "https://issues.chromium.org/issues/514017820"
    } ],
    "release_date" : "2026-08-25T20:10:29.472000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia"
  }, {
    "cve" : "CVE-2026-79043",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T20:58:58.763324+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524044"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox, leading to a compromise of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Critical severity because an unauthenticated remote attacker can escape sandbox isolation to execute arbitrary code with the privileges of the desktop user upon parsing malicious web content. In Red Hat Enterprise Linux environments, exposure is primarily confined to graphical desktop installations or client applications embedding the WebKitGTK rendering engine, as default server deployments do not process web pages. Other browser packages provided in Red Hat distributions, such as Mozilla Firefox, do not include the vulnerable ANGLE code and are not affected.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79043"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524044",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524044"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79043",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79043"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79043",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79043"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/532988552",
      "url" : "https://issues.chromium.org/issues/532988552"
    } ],
    "release_date" : "2026-08-25T20:10:05.741000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page"
  }, {
    "cve" : "CVE-2026-79048",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T21:04:50.635874+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524091"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a graphics abstraction layer used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code within the sandbox environment.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat has evaluated this vulnerability as having an Important severity rating because an unauthenticated remote attacker could achieve code execution inside the renderer sandbox upon tricking an end user into viewing malicious web content, which elevates the risk above Moderate despite requiring user interaction. In typical Red Hat Enterprise Linux environments, web rendering engines operate under process isolation, restricting the blast radius of renderer-level memory corruptions and preventing broader system compromise without a secondary exploit. Additionally, upstream advisories indicate that this defect is specific to implementations running on Windows platforms, substantially reducing practical exposure on Linux distributions.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79048"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524091",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524091"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79048",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79048"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79048",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79048"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536531630",
      "url" : "https://issues.chromium.org/issues/536531630"
    } ],
    "release_date" : "2026-08-25T20:10:07.339000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page"
  }, {
    "cve" : "CVE-2026-79112",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-08-25T20:43:17.773140+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523847"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An out of bounds read flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=524864599",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: Out of bounds read in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79112"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523847",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523847"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79112",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79112"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79112",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79112"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/524864599",
      "url" : "https://issues.chromium.org/issues/524864599"
    } ],
    "release_date" : "2026-08-25T20:10:55.732000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 3.5,
        "baseSeverity" : "LOW",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Low"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: Out of bounds read in Skia"
  }, {
    "cve" : "CVE-2026-79118",
    "cwe" : {
      "id" : "CWE-908",
      "name" : "Use of Uninitialized Resource"
    },
    "discovery_date" : "2026-08-25T20:45:18.697214+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523865"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Chromium's ANGLE component. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive cross-origin data.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Chromium: Information disclosure due to uninitialized resource in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79118"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523865",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523865"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79118",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79118"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79118",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79118"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/535379043",
      "url" : "https://issues.chromium.org/issues/535379043"
    } ],
    "release_date" : "2026-08-25T20:10:06.380000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Chromium: Information disclosure due to uninitialized resource in ANGLE"
  }, {
    "cve" : "CVE-2026-79120",
    "cwe" : {
      "id" : "CWE-908",
      "name" : "Use of Uninitialized Resource"
    },
    "discovery_date" : "2026-08-25T20:44:31.377535+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523859"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE in Google Chrome. An uninitialized resource vulnerability exists that allows a remote attacker to potentially obtain cross-origin data by enticing a user to visit a crafted HTML page.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79120"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523859",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523859"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79120",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79120"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79120",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79120"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/512971896",
      "url" : "https://issues.chromium.org/issues/512971896"
    } ],
    "release_date" : "2026-08-25T20:10:24.962000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.5,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource"
  }, {
    "cve" : "CVE-2026-79127",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T21:01:33.383346+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524066"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security sandbox, leading to a compromise of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Critical because an attacker can achieve arbitrary code execution outside the browser sandbox upon rendering malicious content, completely bypassing process isolation. In Red Hat Enterprise Linux, the affected WebKitGTK libraries are primarily consumed by graphical desktop applications rather than headless server services. Systems running desktop sessions or client applications processing untrusted web content face significant exposure, whereas standard server installations lacking graphical interfaces are not exposed in default configurations.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79127"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524066",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524066"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79127",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79127"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79127",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79127"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/517045394",
      "url" : "https://issues.chromium.org/issues/517045394"
    } ],
    "release_date" : "2026-08-25T20:10:32.219000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write"
  }, {
    "cve" : "CVE-2026-79130",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-25T21:06:37.753099+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524102"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit this buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox, potentially compromising the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as having Critical impact because it allows an unauthenticated remote adversary to escape sandbox restrictions and execute arbitrary commands in the context of the user running the browser or rendering engine. In Red Hat Enterprise Linux, WebKitGTK packages embed the vulnerable graphics translation layer and are primarily consumed by desktop environments and graphical helper applications. Typical server installations without graphical user interfaces do not expose this surface, but workstation deployments and users processing untrusted web content remain susceptible to compromise upon navigating to a hostile webpage.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79130"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524102",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524102"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79130",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79130"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79130",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79130"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/523717796",
      "url" : "https://issues.chromium.org/issues/523717796"
    } ],
    "release_date" : "2026-08-25T20:10:03.828000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page"
  }, {
    "cve" : "CVE-2026-79131",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T21:00:07.139922+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524057"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Critical severity for Red Hat Enterprise Linux because an unauthenticated remote adversary can break out of the rendering sandbox to achieve full code execution with the permissions of the logged-in user. The scope change and potential for system compromise elevate the risk beyond Moderate or Important bands. In typical Red Hat deployments, exposure is largely confined to desktop workstations or environments running graphical utilities that embed WebKitGTK, leaving default minimal server installations unexposed unless they actively render external web content. Successful exploitation still mandates user interaction, requiring a target to load malicious web content in a vulnerable application.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79131"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524057",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524057"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79131",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79131"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79131",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79131"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536626343",
      "url" : "https://issues.chromium.org/issues/536626343"
    } ],
    "release_date" : "2026-08-25T20:10:08.106000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-79138",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T20:43:47.433075+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523850"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in chromium-browser. An out-of-bounds write vulnerability in ANGLE, a component used for graphics rendering, could allow a remote attacker to execute malicious code. This vulnerability can be exploited by tricking a user into visiting a specially crafted web page. Successful exploitation could lead to arbitrary code execution, potentially allowing the attacker to take control of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Critical severity for Red Hat Enterprise Linux because it allows an unauthenticated remote attacker to escape the application sandbox and execute arbitrary code with the privileges of the logged-in user. The issue primarily impacts desktop workstations and client applications that leverage WebKitGTK to process untrusted web content or render complex graphics. Red Hat Enterprise Linux servers operating without graphical desktop environments or browser engines are not exposed to this flaw under typical deployment configurations.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79138"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523850",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523850"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79138",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79138"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79138",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79138"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536681676",
      "url" : "https://issues.chromium.org/issues/536681676"
    } ],
    "release_date" : "2026-08-25T20:10:08.686000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE"
  }, {
    "cve" : "CVE-2026-79142",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-25T21:04:21.843411+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524088"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe compromise of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Critical for Red Hat because successful exploitation allows an unauthenticated remote attacker to escape the sandbox and execute arbitrary commands directly on the host system. The affected ANGLE graphics translation component is bundled within WebKitGTK packages in Red Hat Enterprise Linux, whereas standalone Mozilla products such as Firefox and Thunderbird are unaffected. In typical Red Hat deployments, WebKitGTK is primarily utilized by optional graphical desktop applications, leaving headless enterprise server installations unexposed unless client rendering software processes untrusted web pages.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79142"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524088",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524088"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79142",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79142"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79142",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79142"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/529509587",
      "url" : "https://issues.chromium.org/issues/529509587"
    } ],
    "release_date" : "2026-08-25T20:10:04.957000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page"
  }, {
    "cve" : "CVE-2026-79144",
    "cwe" : {
      "id" : "CWE-346",
      "name" : "Origin Validation Error"
    },
    "discovery_date" : "2026-08-25T21:06:05.863245+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524104"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "An information leak flaw was found in the Skia component of the Chromium browser.\n\nUpstream bug(s):\n\nhttps://code.google.com/p/chromium/issues/detail?id=501759192",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: Information leak in Skia",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79144"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524104",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524104"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79144",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79144"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79144",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79144"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/501759192",
      "url" : "https://issues.chromium.org/issues/501759192"
    } ],
    "release_date" : "2026-08-25T20:10:18.758000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: Information leak in Skia"
  }, {
    "cve" : "CVE-2026-79147",
    "cwe" : {
      "id" : "CWE-201",
      "name" : "Insertion of Sensitive Information Into Sent Data"
    },
    "discovery_date" : "2026-08-25T20:48:30.650286+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523912"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially lead to the disclosure of sensitive information.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79147"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523912",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523912"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79147",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79147"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79147",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79147"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513969378",
      "url" : "https://issues.chromium.org/issues/513969378"
    } ],
    "release_date" : "2026-08-25T20:10:50.058000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 4.3,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome"
  }, {
    "cve" : "CVE-2026-79149",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-08-25T20:41:44.275980+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523835"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution via use-after-free vulnerability",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated Critical because an unauthenticated remote attacker could achieve arbitrary code execution outside the renderer sandbox with the permissions of the local user. In Red Hat Enterprise Linux, the issue affects the ANGLE graphics translation engine embedded in WebKitGTK packages, requiring an unsuspecting user to process malicious web content within an affected application. Standard server installations lacking desktop environments or WebKit-based applications are not exposed to this attack vector.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79149"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523835",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523835"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79149",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79149"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79149",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79149"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536636648",
      "url" : "https://issues.chromium.org/issues/536636648"
    } ],
    "release_date" : "2026-08-25T20:10:08.300000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution via use-after-free vulnerability"
  }, {
    "cve" : "CVE-2026-79188",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T20:58:06.800244+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524034"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the ANGLE component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Critical severity is assigned to this vulnerability because an unauthenticated remote attacker can escape sandbox boundaries to execute arbitrary code, compromising the host system. In Red Hat Enterprise Linux, exposure is primarily confined to workstation and desktop environments where users interact with applications embedding WebKitGTK or Chromium to render web content. Headless servers and standard administrative tools that do not process untrusted web graphics are not impacted under default configurations.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79188"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524034",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524034"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79188",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79188"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79188",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79188"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536444272",
      "url" : "https://issues.chromium.org/issues/536444272"
    } ],
    "release_date" : "2026-08-25T20:10:06.955000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page"
  }, {
    "cve" : "CVE-2026-79189",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T21:03:22.106508+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524082"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox, allowing the attacker to gain control over the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Critical severity is assigned to this vulnerability because an unauthenticated remote attacker can escape security sandboxes and achieve arbitrary code execution merely by convincing a victim to load untrusted web content. Red Hat Enterprise Linux systems running graphical applications or embedded browsers built against WebKitGTK are exposed when processing untrusted WebGL or HTML graphics. Although user interaction is required, the potential for complete compromise of the user session without needing elevated privileges justifies the rating.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79189"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524082",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524082"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79189",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79189"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79189",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79189"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536505721",
      "url" : "https://issues.chromium.org/issues/536505721"
    } ],
    "release_date" : "2026-08-25T20:10:07.142000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page"
  }, {
    "cve" : "CVE-2026-79229",
    "cwe" : {
      "id" : "CWE-908",
      "name" : "Use of Uninitialized Resource"
    },
    "discovery_date" : "2026-08-25T20:59:58.952143+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524055"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component within Chromium. This uninitialized resource vulnerability could allow a remote attacker, who has already compromised the renderer process, to read sensitive memory outside of the security sandbox. This exploitation can occur by tricking a user into visiting a specially crafted HTML page, leading to unauthorized information disclosure.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Chromium: Information disclosure via uninitialized resource in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79229"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524055",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524055"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79229",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79229"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79229",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79229"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/516824665",
      "url" : "https://issues.chromium.org/issues/516824665"
    } ],
    "release_date" : "2026-08-25T20:10:31.576000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 6.8,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "chromium-browser: angle: Chromium: Information disclosure via uninitialized resource in ANGLE"
  }, {
    "cve" : "CVE-2026-79230",
    "cwe" : {
      "id" : "CWE-94",
      "name" : "Improper Control of Generation of Code"
    },
    "discovery_date" : "2026-08-25T20:45:59.937425+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523872"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected system.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as having Critical impact for Red Hat products because a remote, unauthenticated attacker could escape the client sandbox and execute arbitrary instructions on the host environment. In Red Hat Enterprise Linux, the affected ANGLE graphics translation layer is integrated into the WebKitGTK (webkit2gtk3) library, which powers local desktop and rendering utilities. Successful exploitation depends on an interactive user loading malicious web content, meaning server installations operating without graphical components are not exposed.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79230"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523872",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523872"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79230",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79230"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79230",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79230"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/520504922",
      "url" : "https://issues.chromium.org/issues/520504922"
    } ],
    "release_date" : "2026-08-25T20:10:39.849000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation"
  }, {
    "cve" : "CVE-2026-79240",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-08-25T20:47:29.220501+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523893"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution within the sandbox environment.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as an Important impact for Red Hat Enterprise Linux because successful exploitation requires user interaction to navigate to a malicious web page, yet allows code execution within the rendering sandbox. The flaw stems from memory corruption in the ANGLE graphics translation library, primarily affecting graphical desktop systems where users actively process untrusted web pages. Typical enterprise server deployments lacking graphical user interfaces or web browsing applications are not exposed to this vulnerability under standard configurations.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79240"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523893",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523893"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79240",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79240"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79240",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79240"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536532605",
      "url" : "https://issues.chromium.org/issues/536532605"
    } ],
    "release_date" : "2026-08-25T20:10:07.535000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write"
  }, {
    "cve" : "CVE-2026-79269",
    "cwe" : {
      "id" : "CWE-824",
      "name" : "Access of Uninitialized Pointer"
    },
    "discovery_date" : "2026-08-25T21:00:47.953289+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524059"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to bypass the web origin policy, leading to unauthorized access to sensitive information or actions.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Chromium: Web origin policy bypass via uninitialized resource in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as having a Critical impact because successful exploitation bypasses the same-origin policy, breaking the core isolation model of web platforms and potentially exposing cross-domain sensitive data. In Red Hat Enterprise Linux environments, exposure is restricted to graphical workstations or applications utilizing embedded WebKitGTK rendering libraries when processing untrusted web content. Headless server installations do not run graphical web rendering engines by default, substantially limiting exposure across enterprise deployments.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79269"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524059",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524059"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79269",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79269"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79269",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79269"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/520542088",
      "url" : "https://issues.chromium.org/issues/520542088"
    } ],
    "release_date" : "2026-08-25T20:10:40.222000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 9.3,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: Chromium: Web origin policy bypass via uninitialized resource in ANGLE"
  }, {
    "cve" : "CVE-2026-79270",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-08-25T20:49:26.728051+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523926"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in chromium-browser. A remote attacker could exploit an uninitialized resource vulnerability in ANGLE by crafting a malicious HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: Chromium-browser: Memory disclosure via uninitialized resource in ANGLE",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as having Important impact for Red Hat Enterprise Linux because successful exploitation allows an attacker to bypass browser process isolation and leak sensitive memory across security boundaries, despite requiring user interaction. While Google Chrome is not distributed by Red Hat, the underlying ANGLE graphics translation layer is integrated into embedded web engines such as WebKitGTK used by desktop applications. Standard enterprise server deployments without graphical environments do not expose this surface, and standalone web browsers like Mozilla Firefox do not incorporate the affected subsystem.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79270"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523926",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523926"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79270",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79270"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79270",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79270"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513048462",
      "url" : "https://issues.chromium.org/issues/513048462"
    } ],
    "release_date" : "2026-08-25T20:10:25.156000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: Chromium-browser: Memory disclosure via uninitialized resource in ANGLE"
  }, {
    "cve" : "CVE-2026-79275",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-08-25T20:50:42.462947+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2523942"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. The attacker could exploit this by enticing a user to visit a specially crafted HTML page.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Arbitrary code execution via use after free",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker can escape the application sandbox to execute arbitrary code on the underlying host. On standard Red Hat Enterprise Linux server installations, graphical rendering libraries such as WebKitGTK and Chromium are not installed or invoked by default unless workstation packages or desktop environments are explicitly selected. Triggering the flaw requires a local user to process a malicious, attacker-controlled web page in a vulnerable web rendering application. However, the ability to break isolation boundaries and achieve full host code execution justifies the Critical rating for environments where these desktop components are active.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79275"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2523942",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2523942"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79275",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79275"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79275",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79275"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/536659904",
      "url" : "https://issues.chromium.org/issues/536659904"
    } ],
    "release_date" : "2026-08-25T20:10:08.488000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Arbitrary code execution via use after free"
  }, {
    "cve" : "CVE-2026-79282",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-08-25T20:59:15.893255+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524048"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component of Google Chrome on Android. This 'use after free' vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page. Successful exploitation could lead to a complete compromise of the affected device.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Critical severity for Red Hat products because an attacker can achieve remote code execution and escape sandbox containment without requiring system privileges. While initially reported in Chromium, the defective ANGLE graphics translation layer is integrated into WebKitGTK packages shipped in Red Hat Enterprise Linux. In typical enterprise environments, WebKitGTK is invoked by graphical applications rendering external web content, exposing users who interact with malicious web resources to complete application or system compromise.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79282"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524048",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524048"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79282",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79282"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79282",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79282"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/496807874",
      "url" : "https://issues.chromium.org/issues/496807874"
    } ],
    "release_date" : "2026-08-25T20:09:56.717000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 9.6,
        "baseSeverity" : "CRITICAL",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page"
  }, {
    "cve" : "CVE-2026-79285",
    "cwe" : {
      "id" : "CWE-908",
      "name" : "Use of Uninitialized Resource"
    },
    "discovery_date" : "2026-08-25T21:05:53.010817+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2524096"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information disclosure.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Important for Red Hat Enterprise Linux desktop installations because an unauthenticated remote attacker can bypass cross-domain security boundaries to expose sensitive data, leading to significant confidentiality loss upon visiting a malicious web page. Within Red Hat deployments, exposure is primarily limited to graphical systems running applications that embed the WebKitGTK rendering engine. Minimal server environments operating without desktop packages or embedded browser components do not process external web content and are therefore not exposed.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-79285"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2524096",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2524096"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-79285",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-79285"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79285",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-79285"
    }, {
      "category" : "external",
      "summary" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html",
      "url" : "https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html"
    }, {
      "category" : "external",
      "summary" : "https://issues.chromium.org/issues/513918923",
      "url" : "https://issues.chromium.org/issues/513918923"
    } ],
    "release_date" : "2026-08-25T20:10:28.901000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "CHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource"
  }, {
    "acknowledgments" : [ {
      "names" : [ "Google Big Sleep" ]
    } ],
    "cve" : "CVE-2026-83596",
    "cwe" : {
      "id" : "CWE-120",
      "name" : "Buffer Copy without Checking Size of Input"
    },
    "discovery_date" : "2026-08-31T19:57:48.998000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2526490"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-83596"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2526490",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2526490"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-83596",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-83596"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-83596",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-83596"
    }, {
      "category" : "external",
      "summary" : "https://bugs.webkit.org/show_bug.cgi?id=322969",
      "url" : "https://bugs.webkit.org/show_bug.cgi?id=322969"
    } ],
    "release_date" : "2026-08-31T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature"
  }, {
    "cve" : "CVE-2026-84635",
    "cwe" : {
      "id" : "CWE-664",
      "name" : "Improper Control of a Resource Through its Lifetime"
    },
    "discovery_date" : "2026-09-16T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2535531"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process termination due to improper state management.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "To exploit this vulnerability, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause an unexpected process termination but the possibility of remote code execution is not discarded.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-84635"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2535531",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2535531"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-84635",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-84635"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-84635",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-84635"
    } ],
    "release_date" : "2026-09-14T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-05T03:06:18+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95403"
    }, {
      "category" : "workaround",
      "details" : "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
      "product_ids" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "REQUIRED",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.AUS:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.AUS:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.src", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-debugsource-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-devel-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-debuginfo-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-0:2.54.0-1.el8_4.x86_64", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.i686", "AppStream-8.4.0.Z.EUS.EXTENSION:webkit2gtk3-jsc-devel-debuginfo-0:2.54.0-1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination"
  } ]
}