The following vulnerabilities have been discovered in the WebKitGTK web engine:
CVE-2025-24223
rheza and an anonymous researcher discovered that processing maliciously crafted web content may lead to memory corruption.
CVE-2025-31204
Nan Wang discovered that processing maliciously crafted web content may lead to memory corruption.
CVE-2025-31205
Ivan Fratric discovered that a malicious website may exfiltrate data cross-origin.
CVE-2025-31206
An anonymous researcher discovered that processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-31215
Jiming Wang and Jikai Ren discovered that processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-31257
Juergen Schmied discovered that processing maliciously crafted web content may lead to an unexpected process crash.
https://security-tracker.debian.org/tracker/DSA-5937-1
Continue reading...
CVE-2025-24223
rheza and an anonymous researcher discovered that processing maliciously crafted web content may lead to memory corruption.
CVE-2025-31204
Nan Wang discovered that processing maliciously crafted web content may lead to memory corruption.
CVE-2025-31205
Ivan Fratric discovered that a malicious website may exfiltrate data cross-origin.
CVE-2025-31206
An anonymous researcher discovered that processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-31215
Jiming Wang and Jikai Ren discovered that processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-31257
Juergen Schmied discovered that processing maliciously crafted web content may lead to an unexpected process crash.
https://security-tracker.debian.org/tracker/DSA-5937-1
Continue reading...

