Status: UPDATED
| Advisory ID: CVE-2026-83596
Key Details
| CVE | CVE-2026-83596 |
| CVSS Score / Version | 8.8 (High) / CVSS v3.1 |
| Updated | 2026-09-30 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high. |
| Affected products | Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, WebKit WebKit, and WebKitGTK WebKitGTK |
| Classified as | CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')) |
Affected Products, Subsystems & Sectors
| Subsystems | OT Supporting Infrastructure |
| Sectors | Multiple |
What to Know
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. (NVD)
What to Do
Monitor Red Hat, WebKit, and WebKitGTK's web pages for any future patch releases.
References