Medium [CVE-2026-43713] Visiting a website may leak sensitive data
This medium-severity Red Hat Linux advisory covers CVE-2026-43713 affecting Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2.
Visiting a website may leak sensitive data. A flaw was found in WebKitGTK.
Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Weakness: CWE-284.
Affected Red Hat products: Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7.
Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat fixing advisory: RHSA-2026:58564, RHSA-2026:42088, RHSA-2026:57348, RHSA-2026:59325, RHSA-2026:59326, RHSA-2026:42062, RHSA-2026:58550, RHSA-2026:54634, RHSA-2026:54572.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 6 days ago·verify at source
- 26.5.2
- webkitgtk4-0:2.52.5-1.el7_9
- webkit2gtk3-0:2.52.5-1.el8_10
- webkit2gtk3-0:2.52.5-1.el8_4
- webkit2gtk3-0:2.52.5-1.el8_6
- webkit2gtk3-0:2.52.5-1.el8_8
- webkit2gtk3-0:2.52.5-1.el9_8
- webkit2gtk3-0:2.52.5-1.el9_2
- webkit2gtk3-0:2.52.5-1.el9_4
- webkit2gtk3-0:2.52.5-1.el9_6
- RHSA-2026:58564
- RHSA-2026:42088
- RHSA-2026:57348
- RHSA-2026:59325
- RHSA-2026:59326
- RHSA-2026:42062
- RHSA-2026:58550
- RHSA-2026:54634
- RHSA-2026:54572
Official advisory · high-confidence parse· fetched 6 days ago·verify at source
Mitigation
Upgrade to a fixed release: 26.5.2, webkitgtk4-0:2.52.5-1.el7_9, webkit2gtk3-0:2.52.5-1.el8_10, webkit2gtk3-0:2.52.5-1.el8_4, webkit2gtk3-0:2.52.5-1.el8_6, webkit2gtk3-0:2.52.5-1.el8_8. That is the remediation for this advisory.
The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.
Official advisory · high-confidence parse· fetched 6 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.