Loading story…
Red Hat disclosed CVE-2026-78376, an Important-severity use-after-free vulnerability in WebKitGTK that can be triggered when a target processes maliciously crafted web content. The memory-handling flaw can cause memory corruption and may lead to remote code execution, with Red Hat assigning a CVSS v3.1 score of 8.8. Red Hat said exploitation typically requires a user to load untrusted content, but warned that in gnome-shell the issue may be reachable from the local network without user interaction.
Affected products include packages in Red Hat Enterprise Linux 7, 8, and 9, while RHEL 6 is outside support scope. Red Hat’s bug tracker said the issue was remediated through improved memory handling, and noted that Apple platforms are not affected. The vendor advised organizations to reduce exposure by avoiding untrusted web content and, where operationally feasible, removing vulnerable WebKitGTK packages until patched updates are applied.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
Red Hat published CVE-2026-78376 as an Important-severity use-after-free vulnerability in WebKitGTK that can be triggered by malicious web content, potentially causing memory corruption and possibly remote code execution. Red Hat assigned a CVSS v3.1 score of 8.8, listed affected RHEL 7/8/9 packages, and linked the issue to Bugzilla 2521858.
The associated Red Hat Bugzilla entry described CVE-2026-78376 as a use-after-free of JSCValue function parameters and said the issue was addressed through improved memory handling. It noted that maliciously crafted web content could trigger memory corruption and that Apple platforms are not affected.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
5 references tracked. Mallory keeps watching after this page renders.
tenable.com
Open sourcebugzilla.redhat.com
Open sourcetenable.com
Open sourceaccess.redhat.com
Open sourcecve.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat disclosed fixes for **CVE-2026-43731**, an Important-severity `WebKitGTK` use-after-free vulnerability that can be triggered when a user processes maliciously crafted web content. The flaw, tracked as **CWE-416**, can lead to memory corruption and may enable unauthorized code execution, memory disclosure, or application crashes; Red Hat assigned it a **CVSS 8.8** score and linked it to WebKitGTK advisory `WSA-2026-0004` and WebKit bug `314115`. The issue originated in Apple's WebKit codebase, where Apple said improved memory management fixed the bug across Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Red Hat said remediation is available through security errata for multiple **RHEL 7, 8, and 9** offerings, including standard, EUS, SAP, and long-life support variants, while **RHEL 6** is out of support scope and should be assumed affected if the vulnerable packages are present.
Aug 24, 2026
Red Hat disclosed **CVE-2026-43742**, a moderate-severity use-after-free flaw in **WebKitGTK** caused by improper memory management when handling maliciously crafted web content. The bug can trigger an unexpected process crash and is tracked under **CWE-416** with a **CVSS v3.1 score of 6.5**; Red Hat noted that, in some circumstances, the weakness could also lead to memory corruption, memory disclosure, or potentially arbitrary code execution. The issue was addressed through improved memory management and aligns with Apple’s upstream description of the same vulnerability affecting WebKit-based platforms. Red Hat linked fixes for affected **Red Hat Enterprise Linux 7, 8, and 9** offerings to multiple `RHSA` advisories, while packages in **RHEL 6** containing `pywebkitgtk` and `webkitgtk` are out of support scope and should be assumed affected. The flaw is also referenced in **WebKitGTK Security Advisory `WSA-2026-0004`** and WebKit bug `315161`, and Apple’s CVE record says the same crafted-content issue affected Safari and several Apple operating systems before their respective patched versions.
Aug 24, 2026
Apple and Red Hat disclosed **CVE-2026-43663**, a moderate-severity `CWE-416` use-after-free flaw in WebKit/WebKitGTK caused by improper memory handling when processing maliciously crafted web content. The vulnerability can be triggered over the network with low attack complexity and no privileges, but it requires user interaction; vendors say successful exploitation can cause an unexpected process crash, creating a denial-of-service condition and potentially broader memory-corruption risks in some scenarios. Apple said it fixed the issue across Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS, while Red Hat reported remediation for multiple **RHEL 7, 8, and 9** product streams through security errata and related Bugzilla tracking. Red Hat assigned the flaw a **CVSS v3 score of 6.5** and noted that some older **RHEL 6** packages containing affected components fall outside support scope; the fix was described as improved memory handling in WebKitGTK.
Aug 24, 2026