The version of webkitgtk4 installed on the remote host is prior to 2.46.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2925 advisory.

    The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS     18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web     content may lead to memory corruption. (CVE-2025-31204)

    The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and     iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-     origin. (CVE-2025-31205)

    A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 11.5,     tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5.
    Processing maliciously crafted web content may lead to an unexpected Safari crash. (CVE-2025-31206)

    The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS     17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously     crafted web content may lead to an unexpected process crash. (CVE-2025-31215)

    This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5,     iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted     web content may lead to an unexpected Safari crash. (CVE-2025-31257)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0451 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-31205:
    The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and     iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-     origin.

    CVE-2025-31257:
    This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5,     iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted     web content may lead to an unexpected Safari crash.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02033-1 advisory.

    Update to version 2.48.2:

    - CVE-2025-24223: Processing maliciously crafted web content may lead to memory corruption (bsc#1243424).
    - CVE-2025-31204: Processing maliciously crafted web content may lead to memory corruption (bsc#1243286).
    - CVE-2025-31205: A malicious website may exfiltrate data cross-origin (bsc#1243282).
    - CVE-2025-31206: Processing maliciously crafted web content may lead to an unexpected crash     (bsc#1243288).
    - CVE-2025-31215: Processing maliciously crafted web content may lead to an unexpected process crash     (bsc#1243289).
    - CVE-2025-31257: Improper memory handling when processing certain web content may lead to an unexpected     crash (bsc#1243596).
    - CVE-2023-42875: Improper memory handling may lead to arbitrary code execution when processing certain     web content (bsc#1241158).
    - CVE-2023-42970: Improper memory management may lead to use-after-free when processing certain web     content (bsc#1241160).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 18.5. It is, therefore, affected by multiple vulnerabilities.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8046 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-31257)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7995 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205)

    * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-31257)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01746-1 advisory.

    Update to version 2.48.2.

    Security issues fixed:

    - CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicious website     (bsc#1243282).
    - CVE-2025-31204: improper memory handling when processing certain web content may lead to memory     corruption       (bsc#1243286).
    - CVE-2025-31206: type confusion issue when processing certain web content may lead to an unexpected crash       (bsc#1243288).
    - CVE-2025-31215: lack of checks when processing certain web content may lead to an unexpected crash     (bsc#1243289).
    - CVE-2025-31257: improper memory handling when processing certain web content may lead to an unexpected     crash       (bsc#1243596).
    - CVE-2025-24223: improper memory handling when processing certain web content may lead to memory     corruption       (bsc#1243424).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8600 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):
    * webkitgtk: A malicious website may exfiltrate data cross-origin     (CVE-2025-31205)

    * webkitgtk: Processing maliciously crafted web content may lead to an     unexpected Safari crash (CVE-2025-31257)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7566-1 advisory.

    Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were     tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to     web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary     code execution.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9958:09 advisory.

    * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-31257)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10497:11 advisory.

    * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2025-31257)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
241776	Amazon Linux 2 : webkitgtk4 (ALAS-2025-2925)	Nessus	Amazon Linux Local Security Checks	2025/7/10	2025/7/14	high
276224	TencentOS Server 3: webkit2gtk3 (TSSA-2025:0451)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	medium
240595	SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2025:02033-1)	Nessus	SuSE Local Security Checks	2025/6/26	2025/6/26	high
235719	Apple iOS < 18.5 Multiple Vulnerabilities (122404)	Nessus	Mobile Devices	2025/5/12	2026/3/23	critical
237374	RHEL 8 : webkit2gtk3 (RHSA-2025:8046)	Nessus	Red Hat Local Security Checks	2025/5/27	2025/6/5	medium
237376	RHEL 9 : webkit2gtk3 (RHSA-2025:7995)	Nessus	Red Hat Local Security Checks	2025/5/27	2025/6/5	medium
237545	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2025:01746-1)	Nessus	SuSE Local Security Checks	2025/5/30	2025/5/31	high
237800	RHEL 9 : webkit2gtk3 (RHSA-2025:8600)	Nessus	Red Hat Local Security Checks	2025/6/5	2025/10/9	medium
238439	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : WebKitGTK vulnerabilities (USN-7566-1)	Nessus	Ubuntu Local Security Checks	2025/6/13	2025/6/13	high
282827	MiracleLinux 8 : webkit2gtk3-2.48.2-1.el8_10.ML.1 (AXSA:2025-9958:09)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	medium
283046	MiracleLinux 9 : webkit2gtk3-2.48.2-1.el9_6 (AXSA:2025-10497:11)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	medium

检测

插件搜索

high

medium

high

critical

medium

medium

high

medium

high

medium

medium