Issued at: 2026-11-14
Updated at: 2026-11-14
Advisory content derived from Red Hat RHSA-2026:99702, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Important: webkit2gtk3 security update
Description
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* chromium-browser: skia: Out of bounds read in Skia (CVE-2026-121084)
* chromium-browser: angle: Use after free in ANGLE (CVE-2026-121148)
* chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-121197)
* chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-121249)
* chromium-browser: skia: Buffer overflow in Skia (CVE-2026-121086)
* chromium-browser: skia: Out of bounds read in Skia (CVE-2026-121160)
* chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-121072)
* chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-121227)
* chromium-browser: skia: Out of bounds read in Skia (CVE-2026-121032)
* chromium-browser: angle: Race condition in ANGLE (CVE-2026-121230)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.