RHSA-2026:84583CriticalCVSS 9.6

Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update

Published
October 19, 2026
Last Modified
November 2, 2026

🔗 CVE IDs covered (11)

CVE-2026-87512 →CVE-2026-87586 →CVE-2026-87604 →CVE-2026-87621 →CVE-2026-87500 →CVE-2026-87596 →CVE-2026-87602 →CVE-2026-87648 →CVE-2026-87654 →CVE-2026-91720 →CVE-2026-91738 →

📋 Description

CVE-2026-87500 — chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page CVE-2026-87512 — chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE CVE-2026-87586 — chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page CVE-2026-87596 — chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87602 — chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page CVE-2026-87604 — chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read CVE-2026-87621 — chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability CVE-2026-87648 — chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free CVE-2026-87654 — chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE CVE-2026-91720 — chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE CVE-2026-91738 — chromium-browser: angle: chromium-browser: Improper input validation in ANGLE

🎯 Affected products47

  • Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-0:2.54.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-0:2.54.1-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-0:2.54.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-0:2.54.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-0:2.54.1-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-0:2.54.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debuginfo-0:2.54.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debuginfo-0:2.54.1-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debuginfo-0:2.54.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debuginfo-0:2.54.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debuginfo-0:2.54.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debugsource-0:2.54.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debugsource-0:2.54.1-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debugsource-0:2.54.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debugsource-0:2.54.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-debugsource-0:2.54.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-0:2.54.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-0:2.54.1-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-0:2.54.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-0:2.54.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-0:2.54.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-debuginfo-0:2.54.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-debuginfo-0:2.54.1-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-debuginfo-0:2.54.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-debuginfo-0:2.54.1-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-devel-debuginfo-0:2.54.1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-jsc-0:2.54.1-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-jsc-0:2.54.1-1.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • webkit2gtk3-jsc-0:2.54.1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • +17 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (14)