The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1325-1 advisory.

    - Update to version 2.48.1
    - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web     content (bsc#1240962)
    - CVE-2025-24208: permissions issue may lead to a cross-site scripting attack when loading a malicious     iframe (bsc#1240961)
    - CVE-2025-24209: buffer overflow may lead to crash when processing maliciously crafted web content     (bsc#1240964)
    - CVE-2025-24213: type confusion issue may lead to memory corruption (bsc#1240963)
    - CVE-2025-24216: improper memory handling may lead to an unexpected crash when processing certain web     content (bsc#1240986)
    - CVE-2025-24264: improper memory handling may lead to unexpected crash when processing certain web     content (bsc#1240987)
    - CVE-2025-30427: use-after-free issue may lead to an unexpected Safari crash when processing maliciously     crafted web content (bsc#1240958)
    - CVE-2024-44192: processing maliciously crafted web content may lead to an unexpected process crash     (bsc#1239863)
    - CVE-2024-54467: a malicious website may exfiltrate data cross-origin due to a cookie management issue     (bsc#1239864)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
234546	SUSE SLES12: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2025:1325-1)	Nessus	SuSE Local Security Checks	2025/4/17	2026/6/25	medium
276044	TencentOS Server 2: webkitgtk4 (TSSA-2025:0554)	Nessus	Tencent Local Security Checks	2025/11/20	2026/11/5	critical

检测

插件搜索

medium

critical