{"id":"CVE-2026-78376","revision":"1943954baace4b1681d7f5f49f8f0f8b","records":[{"revision":"1943954baace4b1681d7f5f49f8f0f8b","observedAt":"2026-10-26T15:35:30.984+00:00","statement":{"source":"cve-program","id":"CVE-2026-78376","aliases":[],"title":"Webkitgtk: use-after-free of jscvalue function parameters","description":"A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.","state":0,"publishedAt":"2026-08-24T13:29:17.412+00:00","modifiedAt":"2026-10-26T13:25:27.8+00:00","affected":[{"ecosystem":"https://webkit.org/","name":"webkit","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WebKit\",\n                    \"product\": \"WebKit\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.21.1\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"packageName\": \"webkit\",\n                    \"collectionURL\": \"https://webkit.org/\",\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"https://webkitgtk.org/","name":"webkitgtk","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WebKitGTK\",\n                    \"product\": \"WebKitGTK\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.21.1\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"packageName\": \"webkitgtk\",\n                    \"collectionURL\": \"https://webkitgtk.org/\",\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"webkit2gtk3","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 8\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"webkit2gtk3\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0:2.54.0-1.el8_10\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:enterprise_linux:8::appstream\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"webkit2gtk3","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 9\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"webkit2gtk3\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0:2.54.0-1.el9_8\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:enterprise_linux:9::appstream\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"webkit2gtk3","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"webkit2gtk3\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0:2.54.0-1.el9_6\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:rhel_eus:9.6::appstream\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"webkitgtk","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 6\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"webkitgtk\",\n                    \"defaultStatus\": \"unknown\",\n                    \"cpes\": [\n                        \"cpe:/o:redhat:enterprise_linux:6\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"webkitgtk3","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 7\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"webkitgtk3\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"cpes\": [\n                        \"cpe:/o:redhat:enterprise_linux:7\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"webkitgtk4","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 7\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"webkitgtk4\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/o:redhat:enterprise_linux:7\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"}],"references":["https://access.redhat.com/errata/RHSA-2026:69098","https://access.redhat.com/errata/RHSA-2026:74084","https://access.redhat.com/errata/RHSA-2026:89821","https://access.redhat.com/security/cve/CVE-2026-78376","https://bugzilla.redhat.com/show_bug.cgi?id=2521858","https://github.com/WebKit/WebKit/pull/72142"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-78376","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-78376","identifiers":["CVE-2026-78376"]},"retained":false,"historicalAffected":[]}],"coverage":[]}