Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-13947

Fixed in a distro release EPSS <1%CVSS 7.4

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.

Published 2025-12-03 · CVE record · OSV

Products: The WebKitGTK Team webkitgtk, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

Distro releases

ReleasePackageFixed in
AlmaLinux 8webkit2gtk32.50.3-1.el8_10
AlmaLinux 8webkit2gtk3-devel2.50.3-1.el8_10
AlmaLinux 8webkit2gtk3-jsc2.50.3-1.el8_10
AlmaLinux 8webkit2gtk3-jsc-devel2.50.3-1.el8_10
AlmaLinux 9webkit2gtk32.50.3-1.el9_7
AlmaLinux 9webkit2gtk3-devel2.50.3-1.el9_7
AlmaLinux 9webkit2gtk3-jsc2.50.3-1.el9_7
AlmaLinux 9webkit2gtk3-jsc-devel2.50.3-1.el9_7
Debian 11webkit2gtk2.50.3-1~deb11u1
Debian 12webkit2gtk2.50.3-1~deb12u1
Debian 12wpewebkitno fix
Debian 13webkit2gtk2.50.3-1~deb13u1
Debian 13wpewebkitno fix
Debian 14webkit2gtk2.50.3-1
Debian 14wpewebkit2.50.3-1
Red Hat Enterprise Linux 8webkit2gtk30:2.50.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-debuginfo0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-debugsource0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-devel0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-devel-debuginfo0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-jsc0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-jsc-debuginfo0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-jsc-devel0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-jsc-devel-debuginfo0:2.50.3-1.el8_10
Red Hat Enterprise Linux 9webkit2gtk30:2.50.3-1.el9_7
Red Hat Enterprise Linux 9webkit2gtk3-debuginfo0:2.50.3-1.el9_7
Red Hat Enterprise Linux 9webkit2gtk3-debugsource0:2.50.3-1.el9_7
Red Hat Enterprise Linux 9webkit2gtk3-devel0:2.50.3-1.el9_7
Red Hat Enterprise Linux 9webkit2gtk3-devel-debuginfo0:2.50.3-1.el9_7
Red Hat Enterprise Linux 9webkit2gtk3-jsc0:2.50.3-1.el9_7
Red Hat Enterprise Linux 9webkit2gtk3-jsc-debuginfo0:2.50.3-1.el9_7
Red Hat Enterprise Linux 9webkit2gtk3-jsc-devel0:2.50.3-1.el9_7
Red Hat Enterprise Linux 9webkit2gtk3-jsc-devel-debuginfo0:2.50.3-1.el9_7
Red Hat rhel aus 8.2webkit2gtk30:2.50.3-2.el8_2
Red Hat rhel aus 8.2webkit2gtk3-debuginfo0:2.50.3-2.el8_2
Red Hat rhel aus 8.2webkit2gtk3-debugsource0:2.50.3-2.el8_2
Red Hat rhel aus 8.2webkit2gtk3-devel0:2.50.3-2.el8_2
Red Hat rhel aus 8.2webkit2gtk3-devel-debuginfo0:2.50.3-2.el8_2
Red Hat rhel aus 8.2webkit2gtk3-jsc0:2.50.3-2.el8_2
Red Hat rhel aus 8.2webkit2gtk3-jsc-debuginfo0:2.50.3-2.el8_2
Red Hat rhel aus 8.2webkit2gtk3-jsc-devel0:2.50.3-2.el8_2
Red Hat rhel aus 8.2webkit2gtk3-jsc-devel-debuginfo0:2.50.3-2.el8_2
Red Hat rhel aus 8.4webkit2gtk30:2.50.3-2.el8_4
Red Hat rhel aus 8.4webkit2gtk3-debuginfo0:2.50.3-2.el8_4
Red Hat rhel aus 8.4webkit2gtk3-debugsource0:2.50.3-2.el8_4
Red Hat rhel aus 8.4webkit2gtk3-devel0:2.50.3-2.el8_4
Red Hat rhel aus 8.4webkit2gtk3-devel-debuginfo0:2.50.3-2.el8_4
Red Hat rhel aus 8.4webkit2gtk3-jsc0:2.50.3-2.el8_4
Red Hat rhel aus 8.4webkit2gtk3-jsc-debuginfo0:2.50.3-2.el8_4
Red Hat rhel aus 8.4webkit2gtk3-jsc-devel0:2.50.3-2.el8_4
Red Hat rhel aus 8.4webkit2gtk3-jsc-devel-debuginfo0:2.50.3-2.el8_4
Red Hat rhel aus 8.6webkit2gtk30:2.50.3-2.el8_6
Red Hat rhel aus 8.6webkit2gtk3-debuginfo0:2.50.3-2.el8_6
Red Hat rhel aus 8.6webkit2gtk3-debugsource0:2.50.3-2.el8_6
Red Hat rhel aus 8.6webkit2gtk3-devel0:2.50.3-2.el8_6
Red Hat rhel aus 8.6webkit2gtk3-devel-debuginfo0:2.50.3-2.el8_6
Red Hat rhel aus 8.6webkit2gtk3-jsc0:2.50.3-2.el8_6
Red Hat rhel aus 8.6webkit2gtk3-jsc-debuginfo0:2.50.3-2.el8_6
Red Hat rhel aus 8.6webkit2gtk3-jsc-devel0:2.50.3-2.el8_6
Red Hat rhel aus 8.6webkit2gtk3-jsc-devel-debuginfo0:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk30:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-debuginfo0:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-debugsource0:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-devel0:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-devel-debuginfo0:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-jsc0:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-jsc-debuginfo0:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-jsc-devel0:2.50.3-2.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-jsc-devel-debuginfo0:2.50.3-2.el8_6
Red Hat rhel e4s 8.8webkit2gtk30:2.50.3-2.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-debuginfo0:2.50.3-2.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-debugsource0:2.50.3-2.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-devel0:2.50.3-2.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-devel-debuginfo0:2.50.3-2.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-jsc0:2.50.3-2.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-jsc-debuginfo0:2.50.3-2.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-jsc-devel0:2.50.3-2.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-jsc-devel-debuginfo0:2.50.3-2.el8_8
Red Hat rhel e4s 9.0webkit2gtk30:2.50.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-debuginfo0:2.50.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-debugsource0:2.50.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-devel0:2.50.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-devel-debuginfo0:2.50.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-jsc0:2.50.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-jsc-debuginfo0:2.50.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-jsc-devel0:2.50.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-jsc-devel-debuginfo0:2.50.3-1.el9_0
Red Hat rhel e4s 9.2webkit2gtk30:2.50.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-debuginfo0:2.50.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-debugsource0:2.50.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-devel0:2.50.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-devel-debuginfo0:2.50.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-jsc0:2.50.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-jsc-debuginfo0:2.50.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-jsc-devel0:2.50.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-jsc-devel-debuginfo0:2.50.3-1.el9_2
Red Hat rhel els 7webkitgtk40:2.50.3-2.el7_9
Red Hat rhel els 7webkitgtk4-debuginfo0:2.50.3-2.el7_9
Red Hat rhel els 7webkitgtk4-devel0:2.50.3-2.el7_9
Red Hat rhel els 7webkitgtk4-doc0:2.50.3-2.el7_9
Red Hat rhel els 7webkitgtk4-jsc0:2.50.3-2.el7_9
Red Hat rhel els 7webkitgtk4-jsc-devel0:2.50.3-2.el7_9
Red Hat rhel eus 9.4webkit2gtk30:2.50.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-debuginfo0:2.50.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-debugsource0:2.50.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-devel0:2.50.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-devel-debuginfo0:2.50.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-jsc0:2.50.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-jsc-debuginfo0:2.50.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-jsc-devel0:2.50.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-jsc-devel-debuginfo0:2.50.3-1.el9_4
Red Hat rhel eus 9.6webkit2gtk30:2.50.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-debuginfo0:2.50.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-debugsource0:2.50.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-devel0:2.50.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-devel-debuginfo0:2.50.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-jsc0:2.50.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-jsc-debuginfo0:2.50.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-jsc-devel0:2.50.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-jsc-devel-debuginfo0:2.50.3-1.el9_6
Red Hat rhel eus long life 8.4webkit2gtk30:2.50.3-2.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-debuginfo0:2.50.3-2.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-debugsource0:2.50.3-2.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-devel0:2.50.3-2.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-devel-debuginfo0:2.50.3-2.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-jsc0:2.50.3-2.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-jsc-debuginfo0:2.50.3-2.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-jsc-devel0:2.50.3-2.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-jsc-devel-debuginfo0:2.50.3-2.el8_4
Red Hat rhel tus 8.6webkit2gtk30:2.50.3-2.el8_6
Red Hat rhel tus 8.6webkit2gtk3-debuginfo0:2.50.3-2.el8_6
Red Hat rhel tus 8.6webkit2gtk3-debugsource0:2.50.3-2.el8_6
Red Hat rhel tus 8.6webkit2gtk3-devel0:2.50.3-2.el8_6
Red Hat rhel tus 8.6webkit2gtk3-devel-debuginfo0:2.50.3-2.el8_6
Red Hat rhel tus 8.6webkit2gtk3-jsc0:2.50.3-2.el8_6
Red Hat rhel tus 8.6webkit2gtk3-jsc-debuginfo0:2.50.3-2.el8_6
Red Hat rhel tus 8.6webkit2gtk3-jsc-devel0:2.50.3-2.el8_6
Red Hat rhel tus 8.6webkit2gtk3-jsc-devel-debuginfo0:2.50.3-2.el8_6
Red Hat rhel tus 8.8webkit2gtk30:2.50.3-2.el8_8
Red Hat rhel tus 8.8webkit2gtk3-debuginfo0:2.50.3-2.el8_8
Red Hat rhel tus 8.8webkit2gtk3-debugsource0:2.50.3-2.el8_8
Red Hat rhel tus 8.8webkit2gtk3-devel0:2.50.3-2.el8_8
Red Hat rhel tus 8.8webkit2gtk3-devel-debuginfo0:2.50.3-2.el8_8
Red Hat rhel tus 8.8webkit2gtk3-jsc0:2.50.3-2.el8_8
Red Hat rhel tus 8.8webkit2gtk3-jsc-debuginfo0:2.50.3-2.el8_8
Red Hat rhel tus 8.8webkit2gtk3-jsc-devel0:2.50.3-2.el8_8
Red Hat rhel tus 8.8webkit2gtk3-jsc-devel-debuginfo0:2.50.3-2.el8_8
Rocky Linux 8webkit2gtk30:2.50.3-1.el8_10
Rocky Linux 9webkit2gtk30:2.50.3-1.el9_7
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSwebkit2gtk32.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSwebkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSwebkit2gtk42.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSwebkit2gtk32.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSwebkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSwebkit2gtk42.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSwebkit2gtk32.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSwebkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSwebkit2gtk42.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSwebkit2gtk32.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSwebkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSwebkit2gtk42.50.3-150400.4.130.4
SUSE Linux Enterprise Module for Basesystem 15 SP6webkit2gtk3-soup22.50.4-150600.12.54.1
SUSE Linux Enterprise Module for Basesystem 15 SP6webkit2gtk42.50.4-150600.12.54.1
SUSE Linux Enterprise Module for Basesystem 15 SP7webkit2gtk3-soup22.50.4-150600.12.54.1
SUSE Linux Enterprise Module for Basesystem 15 SP7webkit2gtk42.50.4-150600.12.54.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6webkit2gtk32.50.4-150600.12.54.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7webkit2gtk32.50.4-150600.12.54.1
SUSE Linux Enterprise Module for Development Tools 15 SP6webkit2gtk42.50.4-150600.12.54.1
SUSE Linux Enterprise Module for Development Tools 15 SP7webkit2gtk42.50.4-150600.12.54.1
SUSE Linux Enterprise Server 12 SP5-LTSSwebkit2gtk32.50.3-4.47.1
SUSE Linux Enterprise Server 15 SP4-LTSSwebkit2gtk32.50.3-150400.4.130.4
SUSE Linux Enterprise Server 15 SP4-LTSSwebkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Linux Enterprise Server 15 SP4-LTSSwebkit2gtk42.50.3-150400.4.130.4
SUSE Linux Enterprise Server 15 SP5-LTSSwebkit2gtk32.50.3-150400.4.130.4
SUSE Linux Enterprise Server 15 SP5-LTSSwebkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Linux Enterprise Server 15 SP5-LTSSwebkit2gtk42.50.3-150400.4.130.4
SUSE Linux Enterprise Server 15 SP6-LTSSwebkit2gtk32.50.4-150600.12.54.1
SUSE Linux Enterprise Server 15 SP6-LTSSwebkit2gtk3-soup22.50.4-150600.12.54.1
SUSE Linux Enterprise Server 15 SP6-LTSSwebkit2gtk42.50.4-150600.12.54.1
SUSE Linux Enterprise Server 16.0webkit2gtk32.50.4-160000.1.1
SUSE Linux Enterprise Server 16.0webkit2gtk42.50.4-160000.1.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5webkit2gtk32.50.3-4.47.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4webkit2gtk32.50.3-150400.4.130.4
SUSE Linux Enterprise Server for SAP Applications 15 SP4webkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Linux Enterprise Server for SAP Applications 15 SP4webkit2gtk42.50.3-150400.4.130.4
SUSE Linux Enterprise Server for SAP Applications 15 SP5webkit2gtk32.50.3-150400.4.130.4
SUSE Linux Enterprise Server for SAP Applications 15 SP5webkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Linux Enterprise Server for SAP Applications 15 SP5webkit2gtk42.50.3-150400.4.130.4
SUSE Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk32.50.4-150600.12.54.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk3-soup22.50.4-150600.12.54.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk42.50.4-150600.12.54.1
SUSE Linux Enterprise Server for SAP applications 16.0webkit2gtk32.50.4-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0webkit2gtk42.50.4-160000.1.1
SUSE Manager Proxy LTS 4.3webkit2gtk3-soup22.50.3-150400.4.130.4
SUSE Manager Server LTS 4.3webkit2gtk3-soup22.50.3-150400.4.130.4
Ubuntu 16.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 16.04 LTSqtwebkit-sourceno fix
Ubuntu 16.04 LTSwebkit2gtkno fix
Ubuntu 16.04 LTSwebkitgtkno fix
Ubuntu 18.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 18.04 LTSqtwebkit-sourceno fix
Ubuntu 18.04 LTSwebkit2gtkno fix
Ubuntu 18.04 LTSwebkitgtkno fix
Ubuntu 20.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 20.04 LTSwebkit2gtkno fix
Ubuntu 20.04 LTSwpewebkitno fix
Ubuntu 22.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 22.04 LTSwebkit2gtk2.50.3-0ubuntu0.22.04.1
Ubuntu 22.04 LTSwpewebkitno fix
Ubuntu 24.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 24.04 LTSwebkit2gtk2.50.3-0ubuntu0.24.04.1
Ubuntu 25.10webkit2gtk2.50.3-0ubuntu0.25.10.1
openSUSE Leap 15.6webkit2gtk32.50.4-150600.12.54.1
openSUSE Leap 15.6webkit2gtk3-soup22.50.4-150600.12.54.1
openSUSE Leap 15.6webkit2gtk42.50.4-150600.12.54.1
openSUSE Leap 16.0webkit2gtk32.50.4-160000.1.1
openSUSE Leap 16.0webkit2gtk3-soup22.50.4-160000.1.1
openSUSE Leap 16.0webkit2gtk42.50.4-160000.1.1