{"schema_version":"1.7.2","id":"OESA-2026-3772","modified":"2026-09-14T16:34:11Z","published":"2026-09-14T16:34:11Z","upstream":["CVE-2026-78376","CVE-2026-83596"],"summary":"webkitgtk security update","details":"WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 3.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.(CVE-2026-78376)\n\nA flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. The vulnerability exists in the findFeature function of OpenTypeVerticalData, which fails to properly validate the full featurelist array.(CVE-2026-83596)","affected":[{"package":{"ecosystem":"openEuler:22.03-LTS-SP4","name":"webkitgtk","purl":"pkg:rpm/openEuler/webkitgtk&distro=openEuler-22.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"webkit2gtk3-2.36.3-10.oe2203sp4"}]}],"ecosystem_specific":{"aarch64":["webkit2gtk3-2.36.3-10.oe2203sp4.aarch64.rpm","webkit2gtk3-debuginfo-2.36.3-10.oe2203sp4.aarch64.rpm","webkit2gtk3-debugsource-2.36.3-10.oe2203sp4.aarch64.rpm","webkit2gtk3-devel-2.36.3-10.oe2203sp4.aarch64.rpm","webkit2gtk3-jsc-2.36.3-10.oe2203sp4.aarch64.rpm","webkit2gtk3-jsc-devel-2.36.3-10.oe2203sp4.aarch64.rpm"],"noarch":["webkit2gtk3-help-2.36.3-10.oe2203sp4.noarch.rpm"],"src":["webkit2gtk3-2.36.3-10.oe2203sp4.src.rpm"],"x86_64":["webkit2gtk3-2.36.3-10.oe2203sp4.x86_64.rpm","webkit2gtk3-debuginfo-2.36.3-10.oe2203sp4.x86_64.rpm","webkit2gtk3-debugsource-2.36.3-10.oe2203sp4.x86_64.rpm","webkit2gtk3-devel-2.36.3-10.oe2203sp4.x86_64.rpm","webkit2gtk3-jsc-2.36.3-10.oe2203sp4.x86_64.rpm","webkit2gtk3-jsc-devel-2.36.3-10.oe2203sp4.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3772"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78376"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83596"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"database_specific":{"severity":"High"}}