GCVE-110-NCSC-2026-64

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published February 13, 2026

The webkit2gtk3 update to version 2.50.4 addresses multiple security vulnerabilities, including memory corruption and buffer overflow, while a high-severity out of bounds memory access vulnerability in ANGLE affects Google Chrome and other Chromium-based browsers.

Download JSON Open in Console

Weaknesses (CWE)

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-416Use After FreeCWE-20Improper Input ValidationCWE-400Uncontrolled Resource ConsumptionCWE-770Allocation of Resources Without Limits or ThrottlingCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-125Out-of-bounds ReadCWE-862Missing AuthorizationCWE-284Improper Access ControlCWE-1021Improper Restriction of Rendered UI Layers or FramesCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-532Insertion of Sensitive Information into Log FileCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Apple	vers:unknown/*	—	—

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON