CVE-2026-84635 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination
MediumCVSS 6.5
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | < 27 | 27 |
| apple iOS and iPadOS | < 27 | 27 |
| apple macos | < 27 | 27 |
| apple tvOS | < 27 | 27 |
| apple visionOS | < 27 | 27 |
| apple watchOS | < 27 | 27 |
| redhat/webkitgtk4(Red Hat:rhel_els:7) | < 2.54.0-1.el7_9 | 2.54.0-1.el7_9 |
| redhat/webkit2gtk3(Red Hat:enterprise_linux:8) | < 2.54.0-1.el8_10 | 2.54.0-1.el8_10 |
| redhat/webkit2gtk3(Red Hat:rhel_aus:8.4) | < 2.54.0-1.el8_4 | 2.54.0-1.el8_4 |
| redhat/webkit2gtk3(Red Hat:rhel_eus_long_life:8.4) | < 2.54.0-1.el8_4 | 2.54.0-1.el8_4 |
| redhat/webkit2gtk3(Red Hat:rhel_aus:8.6) | < 2.54.0-1.el8_6 | 2.54.0-1.el8_6 |
| redhat/webkit2gtk3(Red Hat:rhel_eus_long_life:8.6) | < 2.54.0-1.el8_6 | 2.54.0-1.el8_6 |
| redhat/webkit2gtk3(Red Hat:rhel_tus:8.8) | < 2.54.0-1.el8_8 | 2.54.0-1.el8_8 |
| redhat/webkit2gtk3(Red Hat:rhel_e4s:8.8) | < 2.54.0-1.el8_8 | 2.54.0-1.el8_8 |
| redhat/webkit2gtk3(Red Hat:enterprise_linux:9) | < 2.54.0-1.el9_8 | 2.54.0-1.el9_8 |
| redhat/webkit2gtk3(Red Hat:rhel_e4s:9.2) | < 2.54.0-1.el9_2 | 2.54.0-1.el9_2 |
| redhat/webkit2gtk3(Red Hat:rhel_e4s:9.4) | < 2.54.0-1.el9_4 | 2.54.0-1.el9_4 |
| redhat/webkit2gtk3(Red Hat:rhel_eus:9.6) | < 2.54.0-1.el9_6 | 2.54.0-1.el9_6 |
| debian/webkit2gtk(Debian:12) | All versions | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.2-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.2-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.3-2 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/webkit2gtk(Debian:12) | = 2.40.3-2~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.3-2~deb11u2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.3-2~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.3-2~deb12u2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.5-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.5-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.40.5-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.41.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.41.5-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.41.6-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.41.90-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.41.91-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.41.91-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.41.92-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.0-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.0-1~bpo12+1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.1-1~bpo12+1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.1-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.1-1~deb11u2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.1-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.1-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.2-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.2-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.3-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.3-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.4-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.4-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.5-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.5-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.5-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.42.5-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.43.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.43.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.43.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.43.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.43.4-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.0-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.0-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.1-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.1-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.2-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.2-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.3-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.3-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.44.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.1-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.5-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.6-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.91-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.45.92-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.0-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.0-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.0-2~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.1-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.1-2~bpo12+1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.3-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.3-1~deb11u2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.3-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.4-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.4-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.5-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.5-1+hurd.1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.5-1+hurd.2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.5-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.5-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.6-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.6-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.46.6-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.47.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.47.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.47.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.47.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.47.90-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.0-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.0-1+alpha | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.0-1+hurd.1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.0-1+hurd.2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.0-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.1-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.1-2~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.1-3 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.3-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.3-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.5-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.5-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.5-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.5-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.48.6-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.49.90-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.0-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.0-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.1-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.1-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.1-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.2-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.2-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.2-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.3-1+hurd.1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.3-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.3-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.3-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.4-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.4-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.4-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.5-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.6-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.6-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.6-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.6-1~deb12u2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.50.6-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.51.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.51.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.51.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.51.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.51.90-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.51.91-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.51.92-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.51.93-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.0-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.2-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.3-2 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.3-2~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.5-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.5-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.6-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.52.6-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.53.1-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.53.2-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.53.3-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.53.4-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.53.90-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.53.91-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.53.92-1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.54.0-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:12) | = 2.54.0-1~exp1 | No fix listed |
| debian/webkit2gtk(Debian:13) | < 2.54.0-1~deb13u1 | 2.54.0-1~deb13u1 |
| debian/webkit2gtk(Debian:13) | = 2.48.3-1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.48.5-1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.48.5-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.48.5-1~deb12u1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.48.5-1~deb13u1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.48.6-1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.49.90-1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.50.0-1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.50.0-2 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.50.1-1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.50.1-1~deb11u1 | No fix listed |
| debian/webkit2gtk(Debian:13) | = 2.50.1-1~deb12u1 | No fix listed |
References
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- Red Hat CVE page mitigation vendor-advisory
- RHSA-2026:91631 patch vendor-advisory
- RHSA-2026:74084 patch vendor-advisory
- RHSA-2026:95403 patch vendor-advisory
- RHSA-2026:92339 patch vendor-advisory
- RHSA-2026:93435 patch vendor-advisory
- RHSA-2026:69098 patch vendor-advisory
- RHSA-2026:89822 patch vendor-advisory
- RHSA-2026:92216 patch vendor-advisory
- RHSA-2026:89821 patch vendor-advisory
- Red Hat Bugzilla 2535531 issue-tracking
- www.cve.org
- nvd.nist.gov
- Debian Security Tracker CVE-2026-84635 vendor-advisory