WebKitGTK Memory Corruption on Malicious Web Content Can Be Triggered by Processing a Specially Crafted Page
Last refreshed2026-10-30
Status: UPDATED
| Advisory ID: CVE-2026-83596
Key Details
CVE
CVE-2026-83596
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated
2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, WebKit WebKit, and WebKitGTK WebKitGTK
Classified as
CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
Red Hat
Red Hat Enterprise Linux 7
WebKit
WebKit
WebKitGTK
WebKitGTK
Subsystems
OT Supporting Infrastructure
Sectors
Multiple
What to Know
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. (NVD)
What to Do
Monitor Red Hat, WebKit, and WebKitGTK's web pages for any future patch releases.