The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3701-1 advisory.

    - CVE-2025-43343: improved memory handling in web content processing to prevent process crash     (bsc#1251975)
     - CVE-2025-43272: improved memory handling to prevent unexpected process crash (bsc#1250439)
     - CVE-2025-43342: correctness issue was addressed with improved checks to prevent unexcepted process     crash (bsc#1250440)
     - CVE-2025-43356: improved handling of caches to prevent sensor access without consent (bsc#1250441)
     - CVE-2025-43368: improved memory management to prevent a use-after-free (bsc#1250442)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18097 advisory.

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-43272)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-43342)
      * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-43368)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-43343)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19352 advisory.

    WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages     provide WebKitGTK+ for GTK+ 3.

    Security Fix(es):

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-43272)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-43342)

    * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-43368)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-fcc043d407 advisory.

    Update to 2.50.0:

     * Improved rendering performance by recording each layer once and replaying every dirty region in     different worker threads.
     * Enable damage propagation to the UI process by default.
     * CSS property font-variant-emoji is now enabled by default.
     * Font synthesis properties (bold/italic) are now properly handled.
     * Ensure web view is focused on tap gesture.
     * Added new API to get the theme color of a WebKitWebView.
     * Fix CVE-2025-43272, CVE-2025-43342, CVE-2025-43356, CVE-2025-43368




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17643 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-43272)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-43342)

    * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-43368)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20922 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-43272)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-43342)

    * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-43368)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-43343)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
271170	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2025:3701-1)	Nessus	SuSE Local Security Checks	10/22/2025	10/22/2025	critical
271265	AlmaLinux 9 : webkit2gtk3 (ALSA-2025:18097)	Nessus	Alma Linux Local Security Checks	10/23/2025	10/23/2025	critical
272066	RHEL 7 : webkitgtk4 (RHSA-2025:19352)	Nessus	Red Hat Local Security Checks	10/30/2025	10/30/2025	critical
265819	Fedora 42 : webkitgtk (2025-fcc043d407)	Nessus	Fedora Local Security Checks	9/25/2025	9/25/2025	critical
269779	RHEL 9 : webkit2gtk3 (RHSA-2025:17643)	Nessus	Red Hat Local Security Checks	10/9/2025	10/9/2025	critical
274761	RHEL 9 : webkit2gtk3 (RHSA-2025:20922)	Nessus	Red Hat Local Security Checks	11/11/2025	11/11/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical