
CVE catalog
CVE-2025-10502
chromium affected and fixed versions
Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)
- Severity
- High · CVSS 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.29% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiantrixie-security | chromium | 156.0.8078.73-1~deb13u1 | Fixed | [CVE-2025-10502] |
| Debiantrixie-security | webkit2gtk | 2.54.0-1~deb13u3 | Fixed | [CVE-2025-10502] |
| Debiantrixie | chromium | 140.0.7339.185-1~deb13u1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiantrixie | chromium | 150.0.7871.181-1~deb13u1 | Fixed | [CVE-2025-10502] |
| Debiantrixie | webkit2gtk | 2.54.0-1~deb13u1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiansid | chromium | 140.0.7339.185-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiansid | chromium | 156.0.8078.73-1 | Fixed | [CVE-2025-10502] |
| Debiansid | webkit2gtk | 2.54.0-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiansid | webkit2gtk | 2.54.2-2 | Fixed | [CVE-2025-10502] |
| Debiansid | wpewebkit | 2.54.0-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiansid | wpewebkit | 2.54.2-1 | Fixed | [CVE-2025-10502] |
| Debianforky | chromium | 140.0.7339.185-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
Showing 12 fix observations. All 29 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| UnknownRelease not reported | chromium | 140.0.7339.185-1~deb12u1 | UnknownSource applicability is not established | Provider not reported |
| Debianbookworm | chromium | 140.0.7339.185-1~deb12u1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debianbookworm | chromium | 150.0.7871.100-1~deb12u1 | Fixed | [CVE-2025-10502] |
| Debianbookworm | webkit2gtk | Not reported | AffectedDistribution reports no fix | [CVE-2025-10502] |
| Debianbookworm | webkit2gtk | 2.50.6-1~deb12u2 | Affected | [CVE-2025-10502] |
| Debianbookworm | wpewebkit | Not reported | AffectedDistribution reports no fix | [CVE-2025-10502] |
| Debianbookworm | wpewebkit | 2.38.6-1 | Affected | [CVE-2025-10502] |
| Debianbookworm-security | chromium | 156.0.8078.73-1~deb12u1 | Fixed | [CVE-2025-10502] |
| Debianbookworm-security | webkit2gtk | 2.50.6-1~deb12u1 | Affected | [CVE-2025-10502] |
| Debianforky | chromium | 140.0.7339.185-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debianforky | chromium | 156.0.8078.47-1 | Fixed | [CVE-2025-10502] |
| Debianforky | webkit2gtk | Not reported | AffectedDistribution reports no fix | [CVE-2025-10502] |
| Debianforky | webkit2gtk | 2.52.6-1 | Affected | [CVE-2025-10502] |
| Debianforky | wpewebkit | 2.54.0-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debianforky | wpewebkit | 2.54.1-1 | Fixed | [CVE-2025-10502] |
| Debiansid | chromium | 140.0.7339.185-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiansid | chromium | 156.0.8078.73-1 | Fixed | [CVE-2025-10502] |
| Debiansid | webkit2gtk | 2.54.0-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiansid | webkit2gtk | 2.54.2-2 | Fixed | [CVE-2025-10502] |
| Debiansid | wpewebkit | 2.54.0-1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiansid | wpewebkit | 2.54.2-1 | Fixed | [CVE-2025-10502] |
| Debiantrixie | chromium | 140.0.7339.185-1~deb13u1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiantrixie | chromium | 150.0.7871.181-1~deb13u1 | Fixed | [CVE-2025-10502] |
| Debiantrixie | webkit2gtk | 2.52.6-1~deb13u1 | Affected | [CVE-2025-10502] |
| Debiantrixie | webkit2gtk | 2.54.0-1~deb13u1 | FixedDistribution-reported fixed boundary | [CVE-2025-10502] |
| Debiantrixie | wpewebkit | Not reported | AffectedDistribution reports no fix | [CVE-2025-10502] |
| Debiantrixie | wpewebkit | 2.48.3-1 | Affected | [CVE-2025-10502] |
| Debiantrixie-security | chromium | 156.0.8078.73-1~deb13u1 | Fixed | [CVE-2025-10502] |
| Debiantrixie-security | webkit2gtk | 2.54.0-1~deb13u3 | Fixed | [CVE-2025-10502] |
Original provider fields
{
"package_releases": [
{
"name": "chromium",
"status": "fixed",
"release": "sid",
"version": "156.0.8078.73-1"
},
{
"name": "chromium",
"status": "fixed",
"release": "forky",
"version": "156.0.8078.47-1"
},
{
"name": "chromium",
"status": "fixed",
"release": "trixie",
"version": "150.0.7871.181-1~deb13u1"
},
{
"name": "chromium",
"status": "fixed",
"release": "trixie-security",
"version": "156.0.8078.73-1~deb13u1"
},
{
"name": "chromium",
"status": "fixed",
"release": "bookworm",
"version": "150.0.7871.100-1~deb12u1"
},
{
"name": "chromium",
"status": "fixed",
"release": "bookworm-security",
"version": "156.0.8078.73-1~deb12u1"
},
{
"name": "wpewebkit",
"status": "fixed",
"release": "sid",
"version": "2.54.2-1"
},
{
"name": "wpewebkit",
"status": "fixed",
"release": "forky",
"version": "2.54.1-1"
},
{
"name": "wpewebkit",
"status": "vulnerable",
"release": "trixie",
"version": "2.48.3-1"
},
{
"name": "wpewebkit",
"status": "vulnerable",
"release": "bookworm",
"version": "2.38.6-1"
},
{
"name": "webkit2gtk",
"status": "fixed",
"release": "sid",
"version": "2.54.2-2"
},
{
"name": "webkit2gtk",
"status": "vulnerable",
"release": "forky",
"version": "2.52.6-1"
},
{
"name": "webkit2gtk",
"status": "vulnerable",
"release": "trixie",
"version": "2.52.6-1~deb13u1"
},
{
"name": "webkit2gtk",
"status": "fixed",
"release": "trixie-security",
"version": "2.54.0-1~deb13u3"
},
{
"name": "webkit2gtk",
"status": "vulnerable",
"release": "bookworm",
"version": "2.50.6-1~deb12u2"
},
{
"name": "webkit2gtk",
"status": "vulnerable",
"release": "bookworm-security",
"version": "2.50.6-1~deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "chromium",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "140.0.7339.185-1"
},
{
"bug": null,
"name": "chromium",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "140.0.7339.185-1"
},
{
"bug": null,
"name": "chromium",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "140.0.7339.185-1~deb13u1"
},
{
"bug": null,
"name": "chromium",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "140.0.7339.185-1~deb12u1"
},
{
"bug": null,
"name": "wpewebkit",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "2.54.0-1"
},
{
"bug": null,
"name": "wpewebkit",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "2.54.0-1"
},
{
"bug": null,
"name": "wpewebkit",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": ""
},
{
"bug": null,
"name": "wpewebkit",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": ""
},
{
"bug": null,
"name": "webkit2gtk",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "2.54.0-1"
},
{
"bug": null,
"name": "webkit2gtk",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": ""
},
{
"bug": null,
"name": "webkit2gtk",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "2.54.0-1~deb13u1"
},
{
"bug": null,
"name": "webkit2gtk",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "end-of-life",
"fixed_version": ""
}
],
"distribution_packages": [
{
"name": "chromium",
"fixed_version": "140.0.7339.185-1~deb12u1",
"applicability_unknown": true
}
]
}Publisher notes
[trixie] wpewebkit: wpewebkit not covered by security support in Trixie [bookworm] wpewebkit: wpewebkit not covered by security support in Bookworm
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [chromium]Unknown
Details (4)
150.0.7871.100-1~deb12u1· amd64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
150.0.7871.100-1~deb12u1· arm64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
- [chromium-common]Unknown
Source package: [chromium]
Details (4)
150.0.7871.100-1~deb12u1· amd64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
150.0.7871.100-1~deb12u1· arm64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
- [chromium-driver]Unknown
Source package: [chromium]
Details (4)
150.0.7871.100-1~deb12u1· amd64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
150.0.7871.100-1~deb12u1· arm64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
- [chromium-headless-shell]Unknown
Source package: [chromium]
Details (4)
150.0.7871.100-1~deb12u1· amd64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
150.0.7871.100-1~deb12u1· arm64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
- [chromium-l10n]Unknown
Source package: [chromium]
Details (4)
150.0.7871.100-1~deb12u1· all · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
150.0.7871.100-1~deb12u1· all · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· all · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· all · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
- [chromium-sandbox]Unknown
Source package: [chromium]
Details (4)
150.0.7871.100-1~deb12u1· amd64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
150.0.7871.100-1~deb12u1· arm64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
- [chromium-shell]Unknown
Source package: [chromium]
Details (4)
150.0.7871.100-1~deb12u1· amd64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
150.0.7871.100-1~deb12u1· arm64 · bookwormFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
151.0.7922.173-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
140.0.7339.185-1~deb12u1dsa · chromium · debian · bookworm; dsa · chromium · debian · 12
- [gir1.2-javascriptcoregtk-4.0]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [gir1.2-javascriptcoregtk-4.1]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [gir1.2-javascriptcoregtk-6.0]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [gir1.2-webkit2-4.0]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [gir1.2-webkit2-4.1]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [gir1.2-webkit-6.0]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [libjavascriptcoregtk-4.0-18]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [libjavascriptcoregtk-4.0-bin]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [libjavascriptcoregtk-4.0-dev]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [libjavascriptcoregtk-4.1-0]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [libjavascriptcoregtk-4.1-dev]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [libjavascriptcoregtk-6.0-1]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- [libjavascriptcoregtk-6.0-dev]Unknown
Source package: [webkit2gtk]
Details (6)
2.50.6-1~deb12u2· amd64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u2· arm64 · bookwormAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· amd64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.46.1-2~bpo12+1· arm64 · bookworm-backportsAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· amd64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
2.50.6-1~deb12u1· arm64 · bookworm-securityAffected
dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
Observed:
References
- [https://access.redhat.com/errata/RHSA-2026:69098]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_69098.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-10502]
- [https://security-tracker.debian.org/tracker/CVE-2025-10502]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3625.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]