8.8Alta

CVE-2026-83596Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

WebKit WebKit; WebKitGTK WebKitGTK; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8 Publicada: 2026-08-31 23:46 (hace 2 meses)

Descripción

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

Debilidad (CWE): CWE-120

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
enterprise linux	8	—
enterprise linux	9	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	all versions
Red Hat	Red Hat Enterprise Linux 8	all versions
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	all versions
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	all versions
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	all versions
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	all versions
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	all versions
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 9	all versions
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	all versions
rhel aus	8.4	—
rhel aus	8.6	—
rhel e4s	8.8	—
rhel e4s	9.2	—
rhel e4s	9.4	—
rhel eus	9.6	—
rhel eus long life	8.4	—
rhel eus long life	8.6	—
rhel tus	8.8	—
WebKit	WebKit	1.10.0
WebKitGTK	WebKitGTK	1.10.0

Referencias y parches

RHSA-2026:69098 vendor-advisory
RHSA-2026:74084 vendor-advisory
RHSA-2026:89821 vendor-advisory
RHSA-2026:89822 vendor-advisory
RHSA-2026:91631 vendor-advisory
RHSA-2026:92216 vendor-advisory
RHSA-2026:92339 vendor-advisory
RHSA-2026:93435 vendor-advisory
RHSA-2026:95403 vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-83596 vdb-entry
https://bugs.webkit.org/show_bug.cgi?id=322969
RHBZ#2526490 issue-tracking

Puntuación CVSS

8.8Alta

Fuente: redhat · CVSS 3.1

Vector de ataque: Red
Complejidad: Baja
Privilegios: Ninguno
Interacción del usuario: Requerida
Alcance: Sin cambio
Confidencialidad: Alto
Integridad: Alto
Disponibilidad: Alto

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Todas las puntuaciones (2)

cna	CVSS 3.1	8.8Alta
secalert@redhat.com	CVSS 3.1	8.8Alta

EPSS (probabilidad de explotación en 30 días)

0.50%

superior al 44 % de todas las CVE

Evaluación de CISA (SSVC)

Explotación: none
Automatizable: no
Impacto técnico: total

Cronología

ID reservado2026-08-31
Publicada2026-08-31 23:46
Llegó a IP-DB2026-10-24 23:48
Última actualización2026-11-05 08:18

Asignada por (CNA): redhat
Estado en NVD: Awaiting Analysis

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Red Hat Enterprise Linux

6.2Media

CVE-2026-128886 hace 2 días

Dbus: server accept watch can be stalled by blocking nonce-tcp accept_with_noncefile path

Red Hat Red Hat Enterprise Linux 10

A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because th…

5.5Media

CVE-2026-110330 hace 2 días

Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This al…

7.8Alta

CVE-2026-110331 hace 2 días

Abrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count element

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard a…

6.2Media

CVE-2026-128987 hace 2 días

Dbus: infinite cpu-spin loop in libdbus socket transport when epipe is received during write operations

Red Hat Red Hat Enterprise Linux 10

A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors a…

5.5Media

CVE-2026-128885 hace 2 días

Dbus: stack out-of-bounds write in dbus _dbus_poll() select() fallback when file descriptor exceeds fd_setsize

Red Hat Red Hat Enterprise Linux 10

A flaw was found in D-Bus. In configurations where the daemon falls back to using the Unix select() mechanism for event monitoring, it does not verify whether file descriptor numbers exceed allocated limits. A local attacker can exploit this flaw by opening a…

8.8Alta

CVE-2026-18379 hace 3 días

Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: path traversal via unsanitized repo name in addrepo/removerepo

Red Hat Red Hat Enterprise Linux 10

A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize…