endpoint-software-vulnerabilitywidely-deployed-product-advisoryend-of-life-software

WebKitGTK Use-After-Free Flaw Enables Memory Corruption on Linux

Vulnerability Disclosure · 3 sources · Updated 2mo ago · First seen Jul 20, 2026

Red Hat disclosed fixes for CVE-2026-43731, an Important-severity WebKitGTK use-after-free vulnerability that can be triggered when a user processes maliciously crafted web content. The flaw, tracked as CWE-416, can lead to memory corruption and may enable unauthorized code execution, memory disclosure, or application crashes; Red Hat assigned it a CVSS 8.8 score and linked it to WebKitGTK advisory WSA-2026-0004 and WebKit bug 314115.

The issue originated in Apple's WebKit codebase, where Apple said improved memory management fixed the bug across Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Red Hat said remediation is available through security errata for multiple RHEL 7, 8, and 9 offerings, including standard, EUS, SAP, and long-life support variants, while RHEL 6 is out of support scope and should be assumed affected if the vulnerable packages are present.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

7 events · Jun 29, 2026 – Jul 20, 2026

Reported Jul 20, 20263mo ago
Red Hat releases RHEL 7 ELS and RHEL 9.2 SAP fixes
Red Hat issued RHSA-2026:58564 for RHEL 7 Extended Lifecycle Support and RHSA-2026:58550 for RHEL 9.2 Update Services for SAP Solutions to address CVE-2026-43731.
2500535 - (CVE-2026-43731) CVE-2026-43731 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption
Reported Jul 20, 20263mo ago
Red Hat releases RHEL 8.4 AMCU and EUS LLA fixes
Red Hat issued RHSA-2026:57348 to fix CVE-2026-43731 for both RHEL 8.4 Advanced Mission Critical Update Support and RHEL 8.4 Extended Update Support Long-Life Add-On.
2500535 - (CVE-2026-43731) CVE-2026-43731 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption
Jul 20, 20263mo ago
Red Hat ships fixes for RHEL 8 and RHEL 9
Red Hat issued RHSA-2026:42088 for RHEL 8 and RHSA-2026:42062 for RHEL 9 to address CVE-2026-43731 in webkit2gtk3.
2500535 - (CVE-2026-43731) CVE-2026-43731 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption
Jul 14, 20264mo ago
Red Hat bug 2500535 opened for CVE-2026-43731
Red Hat tracked CVE-2026-43731 as Bugzilla bug 2500535 after it was reported by OSIDB Bzimport. The bug classified the Linux WebKitGTK issue as a high-severity vulnerability.
2500535 - (CVE-2026-43731) CVE-2026-43731 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption
Jul 10, 20264mo ago
CVE-2026-43731 publicly disclosed
Red Hat states that CVE-2026-43731 became public on July 10, 2026. The flaw affects WebKitGTK and can lead to memory corruption, including possible code execution, memory disclosure, or crashes.
CVE-2026-43731 - Red Hat Customer Portal
Reported Jun 29, 20264mo ago
CVE record updated with additional Apple fix details
The CVE record for CVE-2026-43731 was updated, reflecting Apple fix information across Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
CVE Record: CVE-2026-43731
Jun 29, 20264mo ago
CVE-2026-43731 record published by Apple CNA
The CVE record for CVE-2026-43731 was published, describing an Apple use-after-free flaw in processing maliciously crafted web content that can lead to memory corruption.
CVE Record: CVE-2026-43731

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

1 linked

Use-after-free in WebKit web content processing (CVE-2026-43731)

Affected products

2 linked

WebkitgtkRed Hat Enterprise Linux

Organizations

1 linked

Red Hat

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

3 references tracked. Mallory keeps watching after this page renders.

Redhat OtherNews · Aug 24, 2026

CVE-2026-43731 - Red Hat Customer PortalOpen source ↗

Bugzilla RedhatNews · Jul 20, 2026

2500535 - (CVE-2026-43731) CVE-2026-43731 webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruptionOpen source ↗

CveAdvisories · Jun 29, 2026

CVE Record: CVE-2026-43731Open source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News