[UPDATE] [hoch] WebKitGTK: Mehrere Schwachstellen

CSIRTS triage

What

Multiple vulnerabilities in WebKitGTK allow remote code execution, denial of service, and information disclosure attacks.

Who is affected

Systems running WebKitGTK across multiple versions accessible to remote anonymous attackers.

Urgency

Immediate remediation required; vulnerabilities are actively exploited and permit remote code execution.

Action

Update WebKitGTK to the latest patched version immediately.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

CERT-Bund (BSI) Security Advisories (DE · national-cert · site)

Severity

high

Published

2026-09-04

Exploitation

Observed in the wild (CISA KEV)

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0782

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2023-430100.89% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 57% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2025-312230.56% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 45% of all EPSS-scored CVEs.
• Exploitation confirmedCVE-2025-31277Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 73% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2025-432130.76% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 53% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2025-432141.00% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 61% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2025-435110.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2025-434331.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 64% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2025-434381.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 62% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2025-434410.90% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 57% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2025-434570.57% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 45% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• medium[UPDATE] [mittel] Oracle Java SE: Mehrere Schwachstellencert-bund
• highexploited[UPDATE] [hoch] Apple macOS Tahoe, Sequoia und Sonoma: Mehrere Schwachstellencert-bund
• high[UPDATE] [high] Apple macOS Sequoia, Sonoma, and Ventura: Multiple Vulnerabilitiescert-bund
• criticalexploitedCVE-2025-31277: Apple Multiple Products Buffer Overflow Vulnerabilitycisa-kev

Recent advisories for WebKitGTK

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• high[UPDATE] [hoch] WebKitGTK: Schwachstelle ermöglicht Codeausführungcert-bund · 2026-09-15
• high[UPDATE] [hoch] WebKitGTK: Schwachstelle ermöglicht Codeausführungcert-bund · 2026-09-15
• high[UPDATE] [hoch] WebKitGTK: Mehrere Schwachstellencert-bund · 2026-09-14
• medium[UPDATE] [mittel] WebKitGTK: Mehrere Schwachstellencert-bund · 2026-09-04
• highexploited[UPDATE] [hoch] WebKitGTK: Mehrere Schwachstellencert-bund · 2026-09-04
• high[UPDATE] [hoch] WebKitGTK: Mehrere Schwachstellencert-bund · 2026-09-04

More from CERT-Bund (BSI) Security Advisories

• medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service2026-09-15
• high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen2026-09-15
• high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff2026-09-15
• high[NEU] [hoch] MISP: Mehrere Schwachstellen2026-09-15
• medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service oder unspezifischer Angri…2026-09-15