{
  "cveId": "CVE-2026-84635",
  "url": "https://patchblox.com/security/cve/CVE-2026-84635",
  "summary": "CVE-2026-84635 is fixed in 8 products on 1 platform, first by RHSA-2026:74084, released July 21, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* chromium...",
  "description": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)\n\n* chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-4464)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-4452)\n\n* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-4448)\n\n* chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-5283)\n\n* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5275)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-5277)\n\n* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-5868)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-5879)\n\n* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-6296)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-7340)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-7359)\n\n* chromium-browser: Out of bounds read and write in Angle (CVE-2026-7354)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-7901)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-7903)\n\n* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-7900)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-7942)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-7943)\n\n* chromium-browser: angle: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-8525)\n\n* chromium-browser: angle: chromium-browser: Type Confusion in ANGLE (CVE-2026-8554)\n\n* chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-8556)\n\n* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8567)\n\n* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-8519)\n\n* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9915)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-9928)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-9932)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-9904)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-10018)\n\n* chromium-browser: Out of bounds write in ANGLE (CVE-2026-9879)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-9899)\n\n* chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-9940)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9925)\n\n* chromium-browser: Out of bounds write in ANGLE (CVE-2026-9965)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9926)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-9877)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-9927)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-9946)\n\n* chromium-browser: angle: Inappropriate implementation in ANGLE (CVE-2026-9999)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-9882)\n\n* chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-9910)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-9908)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-9924)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9944)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-9953)\n\n* chromium-browser: angle: Out of bounds read and write in ANGLE (CVE-2026-9975)\n\n* chromium-browser: angle: Insufficient validation of untrusted input in ANGLE (CVE-2026-9982)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-9914)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-9941)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-10019)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-9878)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-9901)\n\n* chromium-browser: Out of bounds write in ANGLE (CVE-2026-9900)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-9969)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9935)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-9911)\n\n* chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-9913)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-9942)\n\n* chromium-browser: Out of bounds write in ANGLE (CVE-2026-9916)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-11113)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-10889)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-10994)\n\n* chromium-browser: Integer overflow in ANGLE (CVE-2026-11088)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-10919)\n\n* chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2026-10999)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-11111)\n\n* chromium-browser: Type Confusion in ANGLE (CVE-2026-10955)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-10974)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11104)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11087)\n\n* chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-11191)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-11055)\n\n* chromium-browser: Out of bounds read and write in ANGLE (CVE-2026-10881)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-10930)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11005)\n\n* chromium-browser: Out of bounds write in ANGLE (CVE-2026-10907)\n\n* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-11004)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-11040)\n\n* chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2026-10929)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-10913)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11090)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11268)\n\n* chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-11044)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-11065)\n\n* chromium-browser: Out of bounds write in ANGLE (CVE-2026-10883)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11110)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-11043)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11123)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11109)\n\n* chromium-browser: Use after free in ANGLE (CVE-2026-10914)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11138)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-11051)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-11061)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-10979)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-11137)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-11066)\n\n* chromium-browser: angle: Use after free in ANGLE (CVE-2026-14044)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-13780)\n\n* chromium-browser: angle: Uninitialized Use in ANGLE (CVE-2026-14125)\n\n* chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-13859)\n\n* chromium-browser: Uninitialized Use in ANGLE (CVE-2026-13833)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-13834)\n\n* chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-14152)\n\n* chromium-browser: Type Confusion in ANGLE (CVE-2026-13883)\n\n* chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-13877)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-13975)\n\n* chromium-browser: Out of bounds read in ANGLE (CVE-2026-13819)\n\n* chromium-browser: chromium-browser: Out of bounds write in ANGLE (CVE-2026-14400)\n\n* chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14396)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14401)\n\n* chromium-browser: chromium-browser: Heap buffer overflow in ANGLE (CVE-2026-14385)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-14390)\n\n* chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14388)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-14425)\n\n* chromium-browser: Out of bounds write in ANGLE (CVE-2026-14397)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-14398)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14418)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14382)\n\n* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-14391)\n\n* chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14384)\n\n* chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14402)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-14413)\n\n* chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14411)\n\n* chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-14386)\n\n* chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-14412)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-15109)\n\n* chromium-browser: Chromium: Sandbox escape via out-of-bounds write in ANGLE (CVE-2026-16413)\n\n* chromium-browser: Google Chrome\u0027s ANGLE component: Sandbox escape via out-of-bounds memory access (CVE-2026-16419)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17832)\n\n* chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17683)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17718)\n\n* chromium-browser: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17721)\n\n* chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17676)\n\n* chromium-browser: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17675)\n\n* chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17847)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17811)\n\n* chromium-browser: chromium-browser: Out of bounds memory access in ANGLE (CVE-2026-17801)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17667)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17704)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17750)\n\n* chromium-browser: chromium-browser: Out of bounds write in ANGLE (CVE-2026-17691)\n\n* chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17701)\n\n* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-17717)\n\n* chromium-browser: chromium-browser: Out of bounds read in ANGLE (CVE-2026-17678)\n\n* chromium-browser: ANGLE: chromium-browser: Type Confusion in ANGLE (CVE-2026-17687)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17668)\n\n* chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17695)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17740)\n\n* chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17655)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17790)\n\n* chromium-browser: chromium-browser: Use after free in ANGLE (CVE-2026-17891)\n\n* chromium-browser: chromium-browser: Inappropriate implementation in ANGLE (CVE-2026-17677)\n\n* chromium-browser: chromium-browser: Integer overflow in ANGLE (CVE-2026-17682)\n\n* chromium-browser: chromium-browser: Insufficient validation of untrusted input in ANGLE (CVE-2026-17671)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17714)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17785)\n\n* chromium-browser: chromium-browser: Type Confusion in ANGLE (CVE-2026-17697)\n\n* chromium-browser: chromium-browser: Uninitialized Use in ANGLE (CVE-2026-17689)\n\n* chromium-browser: skia: chromium-browser: Use after free in Skia (CVE-2026-19154)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-19173)\n\n* chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use (CVE-2026-19161)\n\n* chromium-browser: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android (CVE-2026-19157)\n\n* chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)\n\n* chromium-browser: skia: chromium-browser: skia: Information leak in Skia (CVE-2026-76041)\n\n* ANGLE: chromium-browser: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page (CVE-2026-76046)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)\n\n* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)\n\n* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)\n\n* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)\n\n* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)\n\n* webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)\n\n* chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-78989)\n\n* ANGLE: chromium-browser: ANGLE: Arbitrary code execution via use-after-free vulnerability (CVE-2026-79149)\n\n* chromium-browser: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE (CVE-2026-79138)\n\n* chromium-browser: ANGLE: Arbitrary code execution via type confusion in crafted HTML (CVE-2026-78905)\n\n* chromium-browser: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource (CVE-2026-79120)\n\n* chromium-browser: Chromium: Information disclosure due to uninitialized resource in ANGLE (CVE-2026-79118)\n\n* chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via improper input validation (CVE-2026-79230)\n\n* chromium-browser: ANGLE: Arbitrary code execution via type confusion in crafted HTML page (CVE-2026-78904)\n\n* chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79240)\n\n* chromium-browser: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79019)\n\n* chromium-browser: Chromium-browser: Memory disclosure via uninitialized resource in ANGLE (CVE-2026-79270)\n\n* chromium-browser: ANGLE: Arbitrary code execution via use after free (CVE-2026-79275)\n\n* chromium-browser: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-78978)\n\n* chromium-browser: ANGLE: Information disclosure via uninitialized resource (CVE-2026-78965)\n\n* chromium-browser: Chromium ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79188)\n\n* chromium-browser: ANGLE: Remote code execution via crafted HTML page (CVE-2026-79043)\n\n* chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-79282)\n\n* chromium-browser: Chromium: Information disclosure via uninitialized resource in ANGLE (CVE-2026-79229)\n\n* chromium-browser: Chromium: Remote code execution via out-of-bounds write in ANGLE (CVE-2026-79131)\n\n* chromium-browser: Chromium: Web origin policy bypass via uninitialized resource in ANGLE (CVE-2026-79269)\n\n* chromium-browser: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write (CVE-2026-79127)\n\n* chromium-browser: ANGLE: Arbitrary code execution via a crafted HTML page (CVE-2026-79189)\n\n* chromium-browser: ANGLE: ANGLE: Arbitrary Code Execution via Crafted HTML Page (CVE-2026-79142)\n\n* chromium-browser: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page (CVE-2026-79048)\n\n* chromium-browser: ANGLE: Information disclosure via uninitialized resource (CVE-2026-79285)\n\n* chromium-browser: Google Chrome ANGLE: Arbitrary code execution via crafted HTML page (CVE-2026-79130)\n\n* chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-79020)\n\n* chromium-browser: Chromium ANGLE: Arbitrary code execution via race condition in HTML processing (CVE-2026-78906)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)\n\n* webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)\n\n* webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)\n\n* webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2026-64753)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2026-09-14T21:17:38Z",
  "severity": "Important",
  "cvss": 9.6,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
  "epss": 0.00371,
  "epssPercentile": 0.31198,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "webkit2gtk",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.54.0-1~deb13u1",
      "fix": "DEBIAN-CVE-2026-84635",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-84635",
      "released": "2026-10-01T20:52:30Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "RHEL 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "RHSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-74084",
      "released": "2026-07-21T13:07:38Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "RHEL 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "RHSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-69098",
      "released": "2026-08-22T23:50:18Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "almalinux 8",
      "fixedVersion": "2.54.0-1.el8_10",
      "fix": "ALSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-74084",
      "released": "2026-09-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "almalinux 9",
      "fixedVersion": "2.54.0-1.el9_8",
      "fix": "ALSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69098",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "ol 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "ELSA-2026-74084",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-74084",
      "released": "2026-10-01T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "ol 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "ELSA-2026-69098",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69098",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.54.1-160000.1.1",
      "fix": "OPENSUSE-SU-2026:22076-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22076-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "rocky 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "RLSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-74084",
      "released": "2026-10-01T06:01:37Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "rocky 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "RLSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-69098",
      "released": "2026-09-22T18:04:11Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "sles 15.6",
      "fixedVersion": "2.54.1-150600.12.81.3",
      "fix": "SUSE-SU-2026:4858-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4858-1",
      "released": "2026-11-07T00:41:11Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "sles 15.7",
      "fixedVersion": "2.54.1-150600.12.81.3",
      "fix": "SUSE-SU-2026:4858-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4858-1",
      "released": "2026-11-07T00:41:11Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "sles 16.0",
      "fixedVersion": "2.54.1-160000.1.1",
      "fix": "SUSE-SU-2026:24225-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-24225-1",
      "released": "2026-11-07T00:44:01Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "RHSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-74084",
      "released": "2026-07-21T13:07:38Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "RHSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-69098",
      "released": "2026-08-22T23:50:18Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "almalinux 8",
      "fixedVersion": "2.54.0-1.el8_10",
      "fix": "ALSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-74084",
      "released": "2026-09-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "almalinux 9",
      "fixedVersion": "2.54.0-1.el9_8",
      "fix": "ALSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69098",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "ol 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "ELSA-2026-74084",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-74084",
      "released": "2026-10-01T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "ol 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "ELSA-2026-69098",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69098",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "RHEL 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "RHSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-74084",
      "released": "2026-07-21T13:07:38Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "RHEL 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "RHSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-69098",
      "released": "2026-08-22T23:50:18Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "almalinux 8",
      "fixedVersion": "2.54.0-1.el8_10",
      "fix": "ALSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-74084",
      "released": "2026-09-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "almalinux 9",
      "fixedVersion": "2.54.0-1.el9_8",
      "fix": "ALSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69098",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "ol 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "ELSA-2026-74084",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-74084",
      "released": "2026-10-01T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "ol 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "ELSA-2026-69098",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69098",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "RHSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-74084",
      "released": "2026-07-21T13:07:38Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "RHSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-69098",
      "released": "2026-08-22T23:50:18Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "almalinux 8",
      "fixedVersion": "2.54.0-1.el8_10",
      "fix": "ALSA-2026:74084",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-74084",
      "released": "2026-09-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "almalinux 9",
      "fixedVersion": "2.54.0-1.el9_8",
      "fix": "ALSA-2026:69098",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-69098",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "ol 8",
      "fixedVersion": "0:2.54.0-1.el8_10",
      "fix": "ELSA-2026-74084",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-74084",
      "released": "2026-10-01T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "ol 9",
      "fixedVersion": "0:2.54.0-1.el9_8",
      "fix": "ELSA-2026-69098",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69098",
      "released": "2026-09-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-soup2",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.54.1-160000.1.1",
      "fix": "OPENSUSE-SU-2026:22076-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22076-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-soup2",
      "release": "sles 15.6",
      "fixedVersion": "2.54.1-150600.12.81.4",
      "fix": "SUSE-SU-2026:4858-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4858-1",
      "released": "2026-11-07T00:41:11Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-soup2",
      "release": "sles 15.7",
      "fixedVersion": "2.54.1-150600.12.81.4",
      "fix": "SUSE-SU-2026:4858-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4858-1",
      "released": "2026-11-07T00:41:11Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.54.1-160000.1.1",
      "fix": "OPENSUSE-SU-2026:22076-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22076-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "sles 15.6",
      "fixedVersion": "2.54.1-150600.12.81.4",
      "fix": "SUSE-SU-2026:4858-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4858-1",
      "released": "2026-11-07T00:41:11Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "sles 15.7",
      "fixedVersion": "2.54.1-150600.12.81.4",
      "fix": "SUSE-SU-2026:4858-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4858-1",
      "released": "2026-11-07T00:41:11Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "sles 16.0",
      "fixedVersion": "2.54.1-160000.1.1",
      "fix": "SUSE-SU-2026:24225-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-24225-1",
      "released": "2026-11-07T00:44:01Z"
    },
    {
      "platform": "linux",
      "product": "wpewebkit",
      "release": "Debian 14",
      "fixedVersion": "2.54.0-1",
      "fix": "DEBIAN-CVE-2026-84635",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-84635",
      "released": "2026-10-01T20:52:30Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}