vulnerability

Ubuntu: USN-7279-1 (CVE-2025-24150): WebKitGTK vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
9	(AV:N/AC:M/Au:N/C:C/I:C/A:C)	Jan 27, 2025	Feb 21, 2025	Apr 6, 2026

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Jan 27, 2025

Added

Feb 21, 2025

Modified

Apr 6, 2026

Description

A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from Web Inspector may lead to command injection.

Solutions

ubuntu-upgrade-libjavascriptcoregtk-4-0-18ubuntu-upgrade-libjavascriptcoregtk-4-1-0ubuntu-upgrade-libjavascriptcoregtk-6-0-1ubuntu-upgrade-libwebkit2gtk-4-0-37ubuntu-upgrade-libwebkit2gtk-4-1-0ubuntu-upgrade-libwebkitgtk-6-0-4

References

CVE-2025-24150
https://attackerkb.com/topics/CVE-2025-24150
CWE-77
EUVD-EUVD-2025-3654
UBUNTU-USN-7279-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-3654
https://ubuntu.com/security/notices/USN-7279-1
https://webkitgtk.org/security/WSA-2025-0001.html
https://www.cve.org/CVERecord?id=CVE-2025-24150

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report