webkit2gtk3-soup2 (SUSE:Manager Server LTS 4.3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Server LTS 4.3 package webkit2gtk3-soup2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (44)

• CVE-2025-24201 — CVSS 10.0 (critical) — actively exploited: An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS…
• CVE-2025-43343 — CVSS 9.8 (critical): The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26…
• CVE-2025-43342 — CVSS 9.8 (critical): A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26…
• CVE-2025-31278 — CVSS 8.8 (high): The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS…
• CVE-2023-43000 — CVSS 8.8 (high) — actively exploited: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6…
• CVE-2025-24189 — CVSS 8.8 (high): The issue was addressed with improved checks. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3…
• CVE-2025-31273 — CVSS 8.8 (high): The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6…
• CVE-2025-43431 — CVSS 8.8 (high): The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and…
• CVE-2025-43529 — CVSS 8.8 (high) — actively exploited: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS…
• CVE-2025-6558 — CVSS 8.8 (high) — actively exploited: Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to…
• CVE-2025-66287 — CVSS 8.8 (high): A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
• CVE-2025-43419 — CVSS 8.8 (high): The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26…
• CVE-2025-14174 — CVSS 8.8 (high) — actively exploited: Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds…
• CVE-2025-43480 — CVSS 8.1 (high): The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1…
• CVE-2025-43227 — CVSS 7.5 (high): This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia…
• CVE-2025-13502 — CVSS 7.5 (high): A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess…
• CVE-2025-13947 — CVSS 7.4 (high): A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is…
• CVE-2025-43272 — CVSS 6.5 (medium): The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26…
• CVE-2025-43440 — CVSS 6.5 (medium): This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1…
• CVE-2025-43356 — CVSS 6.5 (medium): The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26…
• CVE-2025-43212 — CVSS 6.5 (medium): The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6…
• CVE-2025-43216 — CVSS 6.5 (medium): A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS…
• CVE-2024-54467 — CVSS 6.5 (medium): A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS…
• CVE-2025-43240 — CVSS 6.2 (medium): A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be…
• CVE-2025-43211 — CVSS 6.2 (medium): The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS…
• CVE-2024-44192 — CVSS 5.5 (medium): The issue was addressed with improved checks. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS…
• CVE-2025-43443 — CVSS 4.3 (medium): This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1…
• CVE-2025-43228 — CVSS 4.3 (medium): The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may…
• CVE-2025-43368 — CVSS 4.3 (medium): A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe…
• CVE-2025-43392 — CVSS 4.3 (medium): The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and…
• CVE-2025-43421 — CVSS 4.3 (medium): Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS…
• CVE-2025-43425 — CVSS 4.3 (medium): The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS…
• CVE-2025-43427 — CVSS 4.3 (medium): This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1…
• CVE-2025-43429 — CVSS 4.3 (medium): A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1…
• CVE-2025-43430 — CVSS 4.3 (medium): This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1…
• CVE-2025-43432 — CVSS 4.3 (medium): A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS…
• CVE-2025-43434 — CVSS 4.3 (medium): A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS…
• CVE-2025-43458 — CVSS 4.3 (medium): This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and…
• CVE-2025-43501 — CVSS 4.3 (medium): A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS…
• CVE-2025-43535 — CVSS 4.3 (medium): The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and…
• CVE-2025-43536 — CVSS 4.3 (medium): A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS…
• CVE-2025-43541 — CVSS 4.3 (medium): A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS…
• CVE-2025-43265 — CVSS 4.0 (medium): An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS…
• CVE-2025-43531 — CVSS 3.1 (low): A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and…