CVE-2026-43713
Fixed in a distro release EPSS <1%CVSS 6.5
A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data.
Products: apple safari, Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS, Apple watchOS
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | webkit2gtk3 | 2.52.5-1.el8_10 |
| AlmaLinux 8 | webkit2gtk3 | 2.54.0-1.el8_10 |
| AlmaLinux 8 | webkit2gtk3-devel | 2.54.0-1.el8_10 |
| AlmaLinux 8 | webkit2gtk3-devel | 2.52.5-1.el8_10 |
| AlmaLinux 8 | webkit2gtk3-jsc | 2.52.5-1.el8_10 |
| AlmaLinux 8 | webkit2gtk3-jsc | 2.54.0-1.el8_10 |
| AlmaLinux 8 | webkit2gtk3-jsc-devel | 2.52.5-1.el8_10 |
| AlmaLinux 8 | webkit2gtk3-jsc-devel | 2.54.0-1.el8_10 |
| AlmaLinux 9 | webkit2gtk3 | 2.52.5-1.el9_8 |
| AlmaLinux 9 | webkit2gtk3-devel | 2.52.5-1.el9_8 |
| AlmaLinux 9 | webkit2gtk3-jsc | 2.52.5-1.el9_8 |
| AlmaLinux 9 | webkit2gtk3-jsc-devel | 2.52.5-1.el9_8 |
| Debian 12 | webkit2gtk | no fix |
| Debian 12 | wpewebkit | no fix |
| Debian 13 | webkit2gtk | 2.52.5-1~deb13u1 |
| Debian 13 | wpewebkit | no fix |
| Debian 14 | webkit2gtk | 2.52.5-1 |
| Debian 14 | wpewebkit | 2.52.5-1 |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debuginfo | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debuginfo | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debugsource | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debugsource | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel-debuginfo | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-debuginfo | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.54.0-1.el8_10 |
| Red Hat Enterprise Linux 9 | webkit2gtk3 | 0:2.52.5-1.el9_8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debuginfo | 0:2.52.5-1.el9_8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debugsource | 0:2.52.5-1.el9_8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel | 0:2.52.5-1.el9_8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el9_8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc | 0:2.52.5-1.el9_8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el9_8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el9_8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el9_8 |
| Red Hat rhel aus 8.4 | webkit2gtk3 | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.4 | webkit2gtk3-debuginfo | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.4 | webkit2gtk3-debugsource | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.4 | webkit2gtk3-devel | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.4 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.4 | webkit2gtk3-jsc | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.4 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.4 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.4 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el8_4 |
| Red Hat rhel aus 8.6 | webkit2gtk3 | 0:2.52.5-1.el8_6 |
| Red Hat rhel aus 8.6 | webkit2gtk3-debuginfo | 0:2.52.5-1.el8_6 |
| Red Hat rhel aus 8.6 | webkit2gtk3-debugsource | 0:2.52.5-1.el8_6 |
| Red Hat rhel aus 8.6 | webkit2gtk3-devel | 0:2.52.5-1.el8_6 |
| Red Hat rhel aus 8.6 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el8_6 |
| Red Hat rhel aus 8.6 | webkit2gtk3-jsc | 0:2.52.5-1.el8_6 |
| Red Hat rhel aus 8.6 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el8_6 |
| Red Hat rhel aus 8.6 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el8_6 |
| Red Hat rhel aus 8.6 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el8_6 |
| Red Hat rhel e4s 8.8 | webkit2gtk3 | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 8.8 | webkit2gtk3-debuginfo | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 8.8 | webkit2gtk3-debugsource | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 8.8 | webkit2gtk3-devel | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 8.8 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 8.8 | webkit2gtk3-jsc | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 8.8 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 8.8 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 8.8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el8_8 |
| Red Hat rhel e4s 9.2 | webkit2gtk3 | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.2 | webkit2gtk3-debuginfo | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.2 | webkit2gtk3-debugsource | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.2 | webkit2gtk3-devel | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.2 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.2 | webkit2gtk3-jsc | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.2 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.2 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.2 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el9_2 |
| Red Hat rhel e4s 9.4 | webkit2gtk3 | 0:2.52.5-1.el9_4 |
| Red Hat rhel e4s 9.4 | webkit2gtk3-debuginfo | 0:2.52.5-1.el9_4 |
| Red Hat rhel e4s 9.4 | webkit2gtk3-debugsource | 0:2.52.5-1.el9_4 |
| Red Hat rhel e4s 9.4 | webkit2gtk3-devel | 0:2.52.5-1.el9_4 |
| Red Hat rhel e4s 9.4 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el9_4 |
| Red Hat rhel e4s 9.4 | webkit2gtk3-jsc | 0:2.52.5-1.el9_4 |
| Red Hat rhel e4s 9.4 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el9_4 |
| Red Hat rhel e4s 9.4 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el9_4 |
| Red Hat rhel e4s 9.4 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el9_4 |
| Red Hat rhel els 7 | webkitgtk4 | 0:2.52.5-1.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-debuginfo | 0:2.52.5-1.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-devel | 0:2.52.5-1.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-doc | 0:2.52.5-1.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-jsc | 0:2.52.5-1.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-jsc-devel | 0:2.52.5-1.el7_9 |
| Red Hat rhel eus 9.6 | webkit2gtk3 | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus 9.6 | webkit2gtk3-debuginfo | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus 9.6 | webkit2gtk3-debugsource | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus 9.6 | webkit2gtk3-devel | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus 9.6 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus 9.6 | webkit2gtk3-jsc | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus 9.6 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus 9.6 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus 9.6 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el9_6 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3 | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3-debuginfo | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3-debugsource | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3-devel | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3-jsc | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.4 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el8_4 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3 | 0:2.52.5-1.el8_6 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3-debuginfo | 0:2.52.5-1.el8_6 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3-debugsource | 0:2.52.5-1.el8_6 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3-devel | 0:2.52.5-1.el8_6 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el8_6 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3-jsc | 0:2.52.5-1.el8_6 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el8_6 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el8_6 |
| Red Hat rhel eus long life 8.6 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el8_6 |
| Red Hat rhel tus 8.8 | webkit2gtk3 | 0:2.52.5-1.el8_8 |
| Red Hat rhel tus 8.8 | webkit2gtk3-debuginfo | 0:2.52.5-1.el8_8 |
| Red Hat rhel tus 8.8 | webkit2gtk3-debugsource | 0:2.52.5-1.el8_8 |
| Red Hat rhel tus 8.8 | webkit2gtk3-devel | 0:2.52.5-1.el8_8 |
| Red Hat rhel tus 8.8 | webkit2gtk3-devel-debuginfo | 0:2.52.5-1.el8_8 |
| Red Hat rhel tus 8.8 | webkit2gtk3-jsc | 0:2.52.5-1.el8_8 |
| Red Hat rhel tus 8.8 | webkit2gtk3-jsc-debuginfo | 0:2.52.5-1.el8_8 |
| Red Hat rhel tus 8.8 | webkit2gtk3-jsc-devel | 0:2.52.5-1.el8_8 |
| Red Hat rhel tus 8.8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.52.5-1.el8_8 |
| Rocky Linux 8 | webkit2gtk3 | 0:2.54.0-1.el8_10 |
| Rocky Linux 8 | webkit2gtk3 | 0:2.52.5-1.el8_10 |
| Rocky Linux 9 | webkit2gtk3 | 0:2.52.5-1.el9_8 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3-soup2 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk4 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3-soup2 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk4 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk3 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk3-soup2 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk4 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk3 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk3-soup2 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk4 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | webkit2gtk3-soup2 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | webkit2gtk4 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP7 | webkit2gtk3 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | webkit2gtk4 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3-soup2 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk4 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | webkit2gtk3 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | webkit2gtk3-soup2 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | webkit2gtk4 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | webkit2gtk3 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | webkit2gtk3-soup2 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | webkit2gtk4 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Server 16.0 | webkit2gtk3 | 2.52.5-160000.1.1 |
| SUSE Linux Enterprise Server 16.0 | webkit2gtk4 | 2.52.5-160000.1.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | webkit2gtk3 | 2.52.5-4.63.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3-soup2 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk4 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk3 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk3-soup2 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk4 | 2.52.5-150400.4.146.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | webkit2gtk3 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | webkit2gtk3-soup2 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | webkit2gtk4 | 2.52.5-150600.12.71.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | webkit2gtk3 | 2.52.5-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | webkit2gtk4 | 2.52.5-160000.1.1 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| Ubuntu 18.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 18.04 LTS | qtwebkit-source | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | no fix |
| Ubuntu 18.04 LTS | webkitgtk | no fix |
| Ubuntu 20.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 20.04 LTS | webkit2gtk | no fix |
| Ubuntu 20.04 LTS | wpewebkit | no fix |
| Ubuntu 22.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 22.04 LTS | webkit2gtk | no fix |
| Ubuntu 22.04 LTS | wpewebkit | no fix |
| Ubuntu 24.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 24.04 LTS | webkit2gtk | 2.52.6-0ubuntu0.24.04.1 |
| Ubuntu 26.04 LTS | webkit2gtk | 2.52.6-0ubuntu0.26.04.1 |
| openSUSE Leap 16.0 | webkit2gtk3 | 2.52.5-160000.1.1 |
| openSUSE Leap 16.0 | webkit2gtk3-soup2 | 2.52.5-160000.1.1 |
| openSUSE Leap 16.0 | webkit2gtk4 | 2.52.5-160000.1.1 |