The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:3974 advisory.

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2024-44192)
      * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467)
      * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551)
      * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-24209)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-24216)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-30427)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7387 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2024-44192)

    * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467)

    * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551)

    * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-24209)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-24216)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-30427)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8064 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2024-44192)

    * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467)

    * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551)

    * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2025-24209)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-24216)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-30427)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1331-1 advisory.

    - Update to version 2.48.1
    - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web     content (bsc#1240962)
    - CVE-2025-24208: permissions issue may lead to a cross-site scripting attack when loading a malicious     iframe (bsc#1240961)
    - CVE-2025-24209: buffer overflow may lead to crash when processing maliciously crafted web content     (bsc#1240964)
    - CVE-2025-24213: type confusion issue may lead to memory corruption (bsc#1240963)
    - CVE-2025-24216: improper memory handling may lead to an unexpected crash when processing certain web     content (bsc#1240986)
    - CVE-2025-24264: improper memory handling may lead to unexpected crash when processing certain web     content (bsc#1240987)
    - CVE-2025-30427: use-after-free issue may lead to an unexpected Safari crash when processing maliciously     crafted web content (bsc#1240958)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-256a86d7c8 advisory.

     * Limit the data stored in session state.
     * Remove the empty area below the title bar in Web Inspector when not docked.
     * Fix various crashes and rendering issues


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5427adc3f4 advisory.

     * Limit the data stored in session state.
     * Remove the empty area below the title bar in Web Inspector when not docked.
     * Fix various crashes and rendering issues


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
234713	AlmaLinux 8 : webkit2gtk3 (ALSA-2025:3974)	Nessus	Alma Linux Local Security Checks	4/22/2025	4/22/2025	medium
235834	RHEL 9 : webkit2gtk3 (RHSA-2025:7387)	Nessus	Red Hat Local Security Checks	5/13/2025	6/5/2025	medium
237378	RHEL 8 : webkit2gtk3 (RHSA-2025:8064)	Nessus	Red Hat Local Security Checks	5/27/2025	8/15/2025	medium
234539	SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2025:1331-1)	Nessus	SuSE Local Security Checks	4/17/2025	6/25/2026	critical
234635	Fedora 40 : webkitgtk (2025-256a86d7c8)	Nessus	Fedora Local Security Checks	4/19/2025	4/19/2025	critical
241307	Fedora 42 : webkitgtk (2025-5427adc3f4)	Nessus	Fedora Local Security Checks	7/3/2025	7/3/2025	critical

Detections

Analytics

Plugins Search

medium

medium

medium

critical

critical

critical