https://seclists.org/oss-sec/2026/q3/521: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005

Q: Which versions are affected by the disclosed issues with stated version ranges?

CVE-2026-28984 affects WebKitGTK and WPE WebKit versions before 2.52.4. CVE-2026-43804 affects WebKitGTK and WPE WebKit versions before 2.52.6.

Q: What attacker interaction is required for the issues described in the advisory excerpt?

For CVE-2026-28984, the affected application must process maliciously crafted web content, which may cause an unexpected Safari crash. For CVE-2026-43804, visiting a website may lead to an application denial of service.

Published Aug 19, 2026

Updated

Affected Software

2 affected components

WebKitGTK WebKitGTK<2.52.4, <2.52.6, <2.52.5

WebKitGTK WPE WebKit<2.52.4, <2.52.6, <2.52.5

Frequently Asked Questions

Which versions are affected by the disclosed issues with stated version ranges?

CVE-2026-28984 affects WebKitGTK and WPE WebKit versions before 2.52.4. CVE-2026-43804 affects WebKitGTK and WPE WebKit versions before 2.52.6.

What attacker interaction is required for the issues described in the advisory excerpt?

For CVE-2026-28984, the affected application must process maliciously crafted web content, which may cause an unexpected Safari crash. For CVE-2026-43804, visiting a website may lead to an application denial of service.

https://seclists.org/oss-sec/2026/q3/521: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005

Affected Software

Frequently Asked Questions

Which versions are affected by the disclosed issues with stated version ranges?

What attacker interaction is required for the issues described in the advisory excerpt?

Company

Resources

Contact