Linux · Security advisory · June 24, 2026
RHSA-2026:25918: Security update for 4 packages
RHSA-2026:25918, released June 24, 2026, fixes 16 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
16
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0069
53rd percentile
Priority of the 16 CVEs
Patch now 0
Urgent 0
High 16
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| webkit2gtk3 | RHEL 8 | 0:2.52.4-1.el8_10 |
| webkit2gtk3-devel | RHEL 8 | 0:2.52.4-1.el8_10 |
| webkit2gtk3-jsc | RHEL 8 | 0:2.52.4-1.el8_10 |
| webkit2gtk3-jsc-devel | RHEL 8 | 0:2.52.4-1.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-28955 | webkit2gtk: The issue was addressed with improved memory handling | 8.8 | 0.0069 | None reported | |
| High | CVE-2026-28942 | webkit2gtk: A use-after-free issue was addressed with improved memory management | 8.8 | 0.0061 | None reported | |
| High | CVE-2026-28847 | webkit2gtk: The issue was addressed with improved memory handling | 8.8 | 0.0060 | None reported | |
| High | CVE-2026-28904 | webkit2gtk: The issue was addressed with improved memory handling | 8.8 | 0.0041 | None reported | |
| High | CVE-2026-28905 | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0041 | None reported | |
| High | CVE-2026-28953 | webkit2gtk: The issue was addressed with improved memory handling | 8.8 | 0.0041 | None reported | |
| High | CVE-2026-28883 | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 8.8 | 0.0040 | None reported | |
| High | CVE-2026-28946 | webkit2gtk: A use-after-free issue was addressed with improved memory management | 8.8 | 0.0039 | None reported | |
| High | CVE-2026-28901 | webkit2gtk: The issue was addressed with improved memory handling | 8.8 | 0.0039 | None reported | |
| High | CVE-2026-28902 | webkit2gtk: The issue was addressed with improved memory handling | 8.8 | 0.0039 | None reported | |
| High | CVE-2026-28903 | webkit2gtk: The issue was addressed with improved memory handling | 8.8 | 0.0039 | None reported | |
| High | CVE-2026-28947 | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 8.8 | 0.0038 | None reported | |
| High | CVE-2026-43658 | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 8.8 | 0.0032 | None reported | |
| High | CVE-2026-28907 | WebKit: Processing maliciously crafted web content may prevent Content Security Policy from being enforced | 8.8 | 0.0030 | None reported | |
| High | CVE-2026-43660 | WebKit: Processing maliciously crafted web content may prevent Content Security Policy from being enforced | 8.8 | 0.0027 | None reported | |
| High | CVE-2026-28958 | WebKit: An app may be able to access sensitive user data | 8.8 | 0.0014 | None reported |
Showing 1 to 16 of 16
1