The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01746-1 advisory.

    Update to version 2.48.2.

    Security issues fixed:

    - CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicious website     (bsc#1243282).
    - CVE-2025-31204: improper memory handling when processing certain web content may lead to memory     corruption       (bsc#1243286).
    - CVE-2025-31206: type confusion issue when processing certain web content may lead to an unexpected crash       (bsc#1243288).
    - CVE-2025-31215: lack of checks when processing certain web content may lead to an unexpected crash     (bsc#1243289).
    - CVE-2025-31257: improper memory handling when processing certain web content may lead to an unexpected     crash       (bsc#1243596).
    - CVE-2025-24223: improper memory handling when processing certain web content may lead to memory     corruption       (bsc#1243424).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01724-1 advisory.

    Update to version 2.48.2.

    Security issues fixed:

    - CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicious website     (bsc#1243282).
    - CVE-2025-31204: improper memory handling when processing certain web content may lead to memory     corruption       (bsc#1243286).
    - CVE-2025-31206: type confusion issue when processing certain web content may lead to an unexpected crash       (bsc#1243288).
    - CVE-2025-31215: lack of checks when processing certain web content may lead to an unexpected crash     (bsc#1243289).
    - CVE-2025-31257: improper memory handling when processing certain web content may lead to an unexpected     crash       (bsc#1243596).
    - CVE-2025-24223: improper memory handling when processing certain web content may lead to memory     corruption       (bsc#1243424).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01720-1 advisory.

    Update to version 2.48.2.

    Security issues fixed:

    - CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicious website     (bsc#1243282).
    - CVE-2025-31204: improper memory handling when processing certain web content may lead to memory     corruption       (bsc#1243286).
    - CVE-2025-31206: type confusion issue when processing certain web content may lead to an unexpected crash       (bsc#1243288).
    - CVE-2025-31215: lack of checks when processing certain web content may lead to an unexpected crash     (bsc#1243289).
    - CVE-2025-31257: improper memory handling when processing certain web content may lead to an unexpected     crash       (bsc#1243596).
    - CVE-2025-24223: improper memory handling when processing certain web content may lead to memory     corruption       (bsc#1243424).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02033-1 advisory.

    Update to version 2.48.2:

    - CVE-2025-24223: Processing maliciously crafted web content may lead to memory corruption (bsc#1243424).
    - CVE-2025-31204: Processing maliciously crafted web content may lead to memory corruption (bsc#1243286).
    - CVE-2025-31205: A malicious website may exfiltrate data cross-origin (bsc#1243282).
    - CVE-2025-31206: Processing maliciously crafted web content may lead to an unexpected crash     (bsc#1243288).
    - CVE-2025-31215: Processing maliciously crafted web content may lead to an unexpected process crash     (bsc#1243289).
    - CVE-2025-31257: Improper memory handling when processing certain web content may lead to an unexpected     crash (bsc#1243596).
    - CVE-2023-42875: Improper memory handling may lead to arbitrary code execution when processing certain     web content (bsc#1241158).
    - CVE-2023-42970: Improper memory management may lead to use-after-free when processing certain web     content (bsc#1241160).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
237545	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2025:01746-1)	Nessus	SuSE Local Security Checks	5/30/2025	5/31/2025	high
237436	SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2025:01724-1)	Nessus	SuSE Local Security Checks	5/29/2025	5/29/2025	high
237440	SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2025:01720-1)	Nessus	SuSE Local Security Checks	5/29/2025	5/29/2025	high
240595	SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2025:02033-1)	Nessus	SuSE Local Security Checks	6/26/2025	6/26/2025	high
241427	RHEL 7 : webkitgtk4 (RHSA-2025:10364)	Nessus	Red Hat Local Security Checks	7/7/2025	7/7/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

critical