GCVE-110-NCSC-2026-63

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published February 13, 2026

The webkit2gtk3 update to version 2.50.4 addresses multiple security vulnerabilities, including memory corruption and buffer overflow, while a high-severity out of bounds memory access vulnerability in ANGLE affects Google Chrome and other Chromium-based browsers.

Download JSON Open in Console

Weaknesses (CWE)

CWE-787Out-of-bounds WriteCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-285Improper AuthorizationCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-416Use After FreeCWE-20Improper Input ValidationCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-693Protection Mechanism FailureCWE-400Uncontrolled Resource ConsumptionCWE-269Improper Privilege ManagementCWE-770Allocation of Resources Without Limits or ThrottlingCWE-59Improper Link Resolution Before File Access ('Link Following')CWE-125Out-of-bounds ReadCWE-862Missing AuthorizationCWE-284Improper Access ControlCWE-277Insecure Inherited PermissionsCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Apple	vers:unknown/*	—	—

Aliases

CVE-2025-14174 CVE-2025-43338 CVE-2025-43402 CVE-2025-43403 CVE-2025-43417 CVE-2025-43529 CVE-2025-43533 CVE-2025-46283 CVE-2025-46290 CVE-2025-46300 CVE-2025-46301 CVE-2025-46302 CVE-2025-46303 CVE-2025-46304 CVE-2025-46305 CVE-2025-46310 CVE-2025-59375 CVE-2026-20601 CVE-2026-20602 CVE-2026-20603 CVE-2026-20605 CVE-2026-20606 CVE-2026-20608 CVE-2026-20609 CVE-2026-20610 CVE-2026-20611 CVE-2026-20612 CVE-2026-20614 CVE-2026-20615 CVE-2026-20616 CVE-2026-20617 CVE-2026-20618 CVE-2026-20619 CVE-2026-20620 CVE-2026-20621 CVE-2026-20623 CVE-2026-20624 CVE-2026-20625 CVE-2026-20626 CVE-2026-20627 CVE-2026-20628 CVE-2026-20629 CVE-2026-20630 CVE-2026-20634 CVE-2026-20635 CVE-2026-20636 CVE-2026-20641 CVE-2026-20644 CVE-2026-20646 CVE-2026-20647 CVE-2026-20648 CVE-2026-20649 CVE-2026-20650 CVE-2026-20652 CVE-2026-20653 CVE-2026-20654 CVE-2026-20656 CVE-2026-20658 CVE-2026-20660 CVE-2026-20662 CVE-2026-20666 CVE-2026-20667 CVE-2026-20669 CVE-2026-20671 CVE-2026-20673 CVE-2026-20675 CVE-2026-20676 CVE-2026-20677 CVE-2026-20680 CVE-2026-20681 CVE-2026-20700

References

advisory

Browse GCVE Records

73,685 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON