VDB

CVE-2026-28859

CVE-2026-28859 PUBLISHED CVSS 9.300000190734863 CRITICAL

WebKitGTK ist ein Webbrowser. Dieser nutzt die WebKit-Engine, die auch von Safari und vielen anderen Apps auf macOS, iOS und Linux verwendet wird.

EPSS 0.64% · 47.1th percentile

Risk Scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.64%
47.1th percentile

Affected Products

VendorProductVersions
AppleApple iOS <26.4
SUSESUSE Linux
Red HatRed Hat Enterprise Linux
AppleApple Safari <26.4
AppleApple macOS Sonoma <14.8.5
Open SourceOpen Source WebKitGTK <2.52.1
AppleApple iPadOS <18.7.7
UbuntuUbuntu Linux
AppleApple iPadOS <26.4
AmazonAmazon Linux 2
DebianDebian Linux
AppleApple macOS Tahoe <26.4
OracleOracle Linux
AppleApple macOS Sequoia <15.7.5
AppleApple iOS <18.7.7
RESFRESF Rocky Linux

Timeline

  • Mar 24, 2026 CVE Published
  • Mar 25, 2026 EPSS Score
  • Mar 25, 2026 Coalition ESS Score
  • Mar 25, 2026 PoC Published
  • Mar 27, 2026 PoC Published
  • Mar 29, 2026 Security Advisory
  • Apr 22, 2026 Distribution Patch
  • Apr 22, 2026 Security Advisory
  • Apr 24, 2026 Distribution Patch
  • Apr 27, 2026 Distribution Patch
  • Apr 27, 2026 Security Advisory
  • Apr 28, 2026 Distribution Patch

References

…and 19 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›