OESA-2026-3772

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3772

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-3772.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-3772

Upstream

CVE-2026-78376

CVE-2026-83596

Published

2026-09-14T16:34:11Z

Modified

2026-09-13T16:45:38Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

webkitgtk security update

Details

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 3.

Security Fix(es):

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.(CVE-2026-78376)

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. The vulnerability exists in the findFeature function of OpenTypeVerticalData, which fails to properly validate the full featurelist array.(CVE-2026-83596)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:22.03-LTS-SP4 / webkitgtk

Package

Name: webkitgtk
Purl: pkg:rpm/openEuler/webkitgtk&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

webkit2gtk3-2.36.3-10.oe2203sp4

Ecosystem specific

{
    "aarch64": [
        "webkit2gtk3-2.36.3-10.oe2203sp4.aarch64.rpm",
        "webkit2gtk3-debuginfo-2.36.3-10.oe2203sp4.aarch64.rpm",
        "webkit2gtk3-debugsource-2.36.3-10.oe2203sp4.aarch64.rpm",
        "webkit2gtk3-devel-2.36.3-10.oe2203sp4.aarch64.rpm",
        "webkit2gtk3-jsc-2.36.3-10.oe2203sp4.aarch64.rpm",
        "webkit2gtk3-jsc-devel-2.36.3-10.oe2203sp4.aarch64.rpm"
    ],
    "noarch": [
        "webkit2gtk3-help-2.36.3-10.oe2203sp4.noarch.rpm"
    ],
    "src": [
        "webkit2gtk3-2.36.3-10.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "webkit2gtk3-2.36.3-10.oe2203sp4.x86_64.rpm",
        "webkit2gtk3-debuginfo-2.36.3-10.oe2203sp4.x86_64.rpm",
        "webkit2gtk3-debugsource-2.36.3-10.oe2203sp4.x86_64.rpm",
        "webkit2gtk3-devel-2.36.3-10.oe2203sp4.x86_64.rpm",
        "webkit2gtk3-jsc-2.36.3-10.oe2203sp4.x86_64.rpm",
        "webkit2gtk3-jsc-devel-2.36.3-10.oe2203sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-3772.json"