Linux · Ubuntu · Package update · September 3, 2026

libjavascriptcoregtk-4.0-bin 2.52.6-0ubuntu0.24.04.1: libjavascriptcoregtk-4.0-bin 2.52.6-0ubuntu0.24.04.1 for Ubuntu 24.04.5 LTS (noble)

libjavascriptcoregtk-4.0-bin 2.52.6-0ubuntu0.24.04.1, released September 3, 2026, fixes 47 CVEs in libjavascriptcoregtk-4.0-bin. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
47
None rated Critical
Exploited
0
None reported
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.0126
69th percentile

Priority of the 47 CVEs

Patch now 0 Urgent 0 High 47 Routine 0

Fixed package versions

ProductReleaseFixed in
libjavascriptcoregtk-4.0-binUbuntu 24.04.5 LTS (noble)2.52.6-0ubuntu0.24.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-43715 webkit2gtk3: webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption9.6 0.0126 None reported
High CVE-2026-43725 WebKit: A malicious website may be able to process restricted web content outside the sandbox9.6 0.0091 None reported
High CVE-2026-28955 webkit2gtk: The issue was addressed with improved memory handling8.8 0.0069 None reported
High CVE-2026-43707 WebKit: Processing maliciously crafted web content may lead to an unexpected process crash9.6 0.0069 None reported
High CVE-2026-43745 WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash9.6 0.0068 None reported
High CVE-2026-43720 WebKit Canvas: Processing maliciously crafted web content may lead to an unexpected Safari crash9.6 0.0066 None reported
High CVE-2026-28942 webkit2gtk: A use-after-free issue was addressed with improved memory management8.8 0.0061 None reported
High CVE-2026-28847 webkit2gtk: The issue was addressed with improved memory handling8.8 0.0060 None reported
High CVE-2026-43716 WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash9.6 0.0060 None reported
High CVE-2026-43701 WebKit: A malicious website may be able to process restricted web content outside the sandbox9.6 0.0055 None reported
High CVE-2026-43713 WebKit: Visiting a website may leak sensitive data9.6 0.0053 None reported
High CVE-2026-64730 WebKit: Visiting a website that frames malicious content may lead to UI spoofing9.6 0.0049 None reported
High CVE-2026-43732 WebKit: Processing maliciously crafted web content may disclose sensitive user information9.6 0.0048 None reported
High CVE-2026-43676 WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash9.6 0.0047 None reported
High CVE-2026-64757 WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash9.6 0.0047 None reported
High CVE-2026-64713 WebKit: Websites may know if the user has visited a given link9.6 0.0047 None reported
High CVE-2026-43721 WebKit Storage: A malicious website may be able to silently hijack clipboard data9.6 0.0044 None reported
High CVE-2026-43804 WebKit: Visiting a website may lead to an app denial-of-service9.6 0.0043 None reported
High CVE-2026-64783 WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash9.6 0.0043 None reported
High CVE-2026-43712 webkit2gtk3: webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash9.6 0.0043 None reported
High CVE-2026-43705 WebKit: Processing maliciously crafted web content may lead to memory corruption8.8 0.0042 None reported
High CVE-2026-28904 webkit2gtk: The issue was addressed with improved memory handling8.8 0.0041 None reported
High CVE-2026-28905 WebKit: Processing maliciously crafted web content may lead to an unexpected process crash8.8 0.0041 None reported
High CVE-2026-28953 webkit2gtk: The issue was addressed with improved memory handling8.8 0.0041 None reported
High CVE-2026-43731 WebKit: Processing maliciously crafted web content may lead to memory corruption9.6 0.0041 None reported
Showing 1 to 25 of 47 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.