WebKitGTK Vulnerabilities Expose Users to Remote Attacks

Ubuntu

WebKitGTK Vulnerabilities Expose Users to Remote Attacks

First seen 5 Jan 2026, 16:38 UTC • •39.5

Article Content

1 / 2

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Multiple security vulnerabilities were identified in the WebKitGTK Web and JavaScript engines. Users could be exploited by remote attackers through malicious websites, leading to risks such as cross-site scripting, denial of service, and arbitrary code execution. This affects any user of the WebKitGTK browser framework.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 210d ago How this analysis works

More articles in this cluster (1)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

DDoS

Affected Platform (1)

WebKitGTK

Vulnerability (1)

XSS

Relationships

XSS targets WebKitGTK
DDoS targets WebKitGTK

Continue Reading

Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions A critical vulnerability (CVE-2026-88804) in SUSE Rancher allows unauthenticated remote attackers to execute stored cross-site scripting (XSS) attacks via public UI settings. This affects Rancher versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18.…

Twitch Chat Messages Exploit OBS Studio via Chromium Vulnerability A vulnerability in OBS Studio allows malicious Twitch chat messages to execute native code on streamers' Windows PCs. This exploit targets users running OBS Studio version 32.2.2 or older, leveraging a cross-site scripting (XSS) flaw in custom overlays that render viewer messages as unsanitized HTML. The attack…