Skip to content
VulniPulse
Sign in
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2026-43713

Visiting a website may leak sensitive data

CVE-2026-43713: Visiting a website may leak sensitive data. Not in the CISA KEV catalog. Medium advisory severity (CVSS 6.5, Red Hat).

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

CVE-2026-43713 at a glance

CISA KEV
Not listed (catalog checked )
Highest advisory severity
Medium
CVSS base score
6.5 (Red Hat)
CVSS vector
  • CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N (Red Hat)
Weakness
CWE-284
Fixed releases
  • Red Hat: 26.5.2, webkitgtk4-0:2.52.5-1.el7_9, webkit2gtk3-0:2.52.5-1.el8_10, webkit2gtk3-0:2.54.0-1.el8_10, webkit2gtk3-0:2.52.5-1.el8_4, webkit2gtk3-0:2.52.5-1.el8_6 and 15 more in the advisory
Vendor advisories
1 from Red Hat
VulniPulse record
Published · Updated

Scores, vectors, weaknesses and fixed releases are quoted from vendor advisories that cover only CVE-2026-43713; bulletin-wide values are not repeated here.

Is CVE-2026-43713 exploited?

No exploitation is reported in the sources VulniPulse tracks: CVE-2026-43713 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.

How do I fix CVE-2026-43713?

Upgrade to a fixed release named by the vendor:

  • Red Hat: 26.5.2, webkitgtk4-0:2.52.5-1.el7_9, webkit2gtk3-0:2.52.5-1.el8_10, webkit2gtk3-0:2.54.0-1.el8_10, webkit2gtk3-0:2.52.5-1.el8_4, webkit2gtk3-0:2.52.5-1.el8_6

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityMedium6.5

    Medium [CVE-2026-43713] Visiting a website may leak sensitive data

    CVE-2026-43713Source published Source updated

    A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Visiting a website may leak sensitive data. A flaw was found in WebKitGTK. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Weakness: CWE-284. Affected Red Hat products: Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat…

    Affected products in this advisory
    • Red Hat Enterprise Linux 7 Extended Lifecycle Support
    • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
    • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
    • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

    11 more entries in the full advisory.

    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    • 26.5.2
    • webkitgtk4-0:2.52.5-1.el7_9
    • webkit2gtk3-0:2.52.5-1.el8_10
    • webkit2gtk3-0:2.54.0-1.el8_10

    17 more entries in the full advisory.

    Mitigation guidance
    No mitigation guidance extracted; consult the source.
    Full advisory and evidenceOpen source bulletin

Browse the latest tracked CVEs or the CVEs listed in CISA KEV.

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features