PT-2026-38542 · Webkitgtk · Webkitgtk

Published 2026-05-06 · Updated 2026-05-06

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.52.3-0ubuntu0.24.04.1

Description Security issues in the Web and JavaScript engines could allow a remote attacker to perform cross-site scripting (XSS), denial of service (DoS), and arbitrary code execution if a user is tricked into visiting a malicious website.

Recommendations Update to version 2.52.3-0ubuntu0.24.04.1.

Related Identifiers

USN-8237-1

Affected Products

Webkitgtk

References · 21

• https://ubuntu.com/security/CVE-2026-20636 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20635 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-28859 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-28861 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20608 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46299 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43213 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20665 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43511 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8237-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20652 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20643 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-28871 · Vendor Advisory