Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 418
Alerts This Week
Warning Icon 1 418

SUSE: webkit2gtk3 Important Security Update for Seven Issues 2025:4528-1

suse
Calendar Grey December 26, 2025
Scroller Suse
An important security update for webkit2gtk3 addresses seven vulnerabilities impacting SUSE systems. Update recommended.
An update that solves seven vulnerabilities can now be installed.

Summary

## This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: * CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation (bsc#1255497). * CVE-2025-43501: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer overflow issue (bsc#1255194). * CVE-2025-43529: processing maliciously crafted web content may lead to arbitrary code execution due to a use-after-free issue (bsc#1255198). * CVE-2025-43531: processing maliciously crafted web content may lead to an unexpected process crash due to a race condition (bsc#1255183). * CVE-2025-43535: processing maliciously crafted web content may lead to an

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE important webkit2gtk3 process crash

References

* bsc#1255183

* bsc#1255191

* bsc#1255194

* bsc#1255195

* bsc#1255198

* bsc#1255200

* bsc#1255497

Cross-

* CVE-2025-14174

* CVE-2025-43501

* CVE-2025-43529

* CVE-2025-43531

* CVE-2025-43535

* CVE-2025-43536

* CVE-2025-43541

CVSS scores:

* CVE-2025-14174 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-14174 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-14174 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-43501 ( SUSE ): 6.8

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2025-43501 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2025-43501 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

* CVE-2025-43529 ( SUSE ): 8.6

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:4528-1
Release Date: 2025-12-26T14:52:38Z
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE important webkit2gtk3 process crash

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.