Loading story…
Red Hat disclosed CVE-2026-43742, a moderate-severity use-after-free flaw in WebKitGTK caused by improper memory management when handling maliciously crafted web content. The bug can trigger an unexpected process crash and is tracked under CWE-416 with a CVSS v3.1 score of 6.5; Red Hat noted that, in some circumstances, the weakness could also lead to memory corruption, memory disclosure, or potentially arbitrary code execution. The issue was addressed through improved memory management and aligns with Apple’s upstream description of the same vulnerability affecting WebKit-based platforms.
Red Hat linked fixes for affected Red Hat Enterprise Linux 7, 8, and 9 offerings to multiple RHSA advisories, while packages in RHEL 6 containing pywebkitgtk and webkitgtk are out of support scope and should be assumed affected. The flaw is also referenced in WebKitGTK Security Advisory WSA-2026-0004 and WebKit bug 315161, and Apple’s CVE record says the same crafted-content issue affected Safari and several Apple operating systems before their respective patched versions.
See affected versions and whether adversaries are exploiting it.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat recorded Bugzilla issue 2500539 for CVE-2026-43742 under its Security Response product. The bug tracked the WebKitGTK use-after-free flaw as medium severity and medium priority on Linux.
Red Hat published its CVE entry for CVE-2026-43742, describing a moderate-severity WebKitGTK use-after-free vulnerability caused by improper memory management when processing maliciously crafted web content. Red Hat linked the issue to Bugzilla 2500539, WebKit bug 315161, and WebKitGTK advisory WSA-2026-0004.
Apple published CVE-2026-43742 for a use-after-free issue in web content processing that could cause an unexpected process crash. The CVE record states the flaw was addressed with improved memory management and fixed in Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS releases.
The CVE record for CVE-2026-43742 was updated after its initial publication. The update retained Apple as CNA and continued to reference the fixed versions across affected Apple products.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
redhat.com
Open sourcebugzilla.redhat.com
Open sourcecve.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple and Red Hat disclosed **CVE-2026-43720**, a use-after-free vulnerability in WebKit and WebKitGTK that can be triggered when a user processes maliciously crafted web content. The flaw, mapped to `CWE-416`, stems from improper memory management and can cause an unexpected browser or process crash, including Safari crashes on Apple platforms. Red Hat rated the issue **moderate** with a CVSS v3.1 score of **6.5**, noting that exploitation requires user interaction and primarily affects availability. Fixes were released across Apple products including Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS, while Red Hat published remediation for affected WebKitGTK packages in multiple Red Hat Enterprise Linux 7, 8, and 9 offerings. Red Hat said RHEL 6 packages are outside support scope and should be assumed affected, and linked the issue to WebKit advisory **WSA-2026-0004** and upstream bug **313175**.
Aug 24, 2026
Apple and Red Hat disclosed **CVE-2026-43663**, a moderate-severity `CWE-416` use-after-free flaw in WebKit/WebKitGTK caused by improper memory handling when processing maliciously crafted web content. The vulnerability can be triggered over the network with low attack complexity and no privileges, but it requires user interaction; vendors say successful exploitation can cause an unexpected process crash, creating a denial-of-service condition and potentially broader memory-corruption risks in some scenarios. Apple said it fixed the issue across Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS, while Red Hat reported remediation for multiple **RHEL 7, 8, and 9** product streams through security errata and related Bugzilla tracking. Red Hat assigned the flaw a **CVSS v3 score of 6.5** and noted that some older **RHEL 6** packages containing affected components fall outside support scope; the fix was described as improved memory handling in WebKitGTK.
Aug 24, 2026
Red Hat disclosed fixes for **CVE-2026-43731**, an Important-severity `WebKitGTK` use-after-free vulnerability that can be triggered when a user processes maliciously crafted web content. The flaw, tracked as **CWE-416**, can lead to memory corruption and may enable unauthorized code execution, memory disclosure, or application crashes; Red Hat assigned it a **CVSS 8.8** score and linked it to WebKitGTK advisory `WSA-2026-0004` and WebKit bug `314115`. The issue originated in Apple's WebKit codebase, where Apple said improved memory management fixed the bug across Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Red Hat said remediation is available through security errata for multiple **RHEL 7, 8, and 9** offerings, including standard, EUS, SAP, and long-life support variants, while **RHEL 6** is out of support scope and should be assumed affected if the vulnerable packages are present.
Aug 24, 2026