Use-after-free in WPE WebKit and WebKitGTK+ - CVE-2026-64787

Vulnerability identifier: #VU143956

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-64787

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to crash the browser.

The vulnerability exists due to a use-after-free error when processing untrusted web content in WebKit. A remote attacker can trick the victim into visiting a malicious website and crash the browser.

WPE WebKit
WebKitGTK+
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Development Tools Module
Desktop Applications Module
Basesystem Module
openSUSE Leap
Ubuntu
macOS
iPadOS
Apple iOS
tvOS
watchOS
visionOS
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
webkitgtk4 (Red Hat package)
webkit2gtk3 (Red Hat package)
webkit2gtk (Ubuntu package)
webkit2gtk4-debugsource
libjavascriptcoregtk-4_1-0-32bit-debuginfo
typelib-1_0-JavaScriptCore-4_1
typelib-1_0-WebKitWebProcessExtension-6_0
webkit2gtk-4_0-injected-bundles-debuginfo
libjavascriptcoregtk-6_0-1-debuginfo
webkit2gtk-4_1-injected-bundles-debuginfo
libjavascriptcoregtk-4_0-18
webkit2gtk3-soup2-devel
webkit-jsc-4.1
webkit2gtk3-debugsource
libwebkit2gtk-4_0-37-32bit-debuginfo
webkitgtk-6_0-injected-bundles
libwebkit2gtk-4_0-37
webkit-jsc-6.0
webkit2gtk3-soup2-minibrowser
typelib-1_0-WebKit2WebExtension-4_0
libwebkit2gtk-4_1-0-32bit
libjavascriptcoregtk-4_1-0-32bit
webkit-jsc-4
libwebkit2gtk-4_0-37-32bit
libwebkit2gtk-4_1-0-32bit-debuginfo
libjavascriptcoregtk-4_0-18-32bit-debuginfo
libjavascriptcoregtk-4_0-18-32bit
WebKitGTK-4.1-lang
WebKitGTK-4.0-lang
WebKitGTK-6.0-lang
libwebkit2gtk-4_1-0-64bit
libwebkit2gtk-4_0-37-64bit-debuginfo
libjavascriptcoregtk-4_0-18-64bit
libwebkit2gtk-4_1-0-64bit-debuginfo
libjavascriptcoregtk-4_1-0-64bit-debuginfo
libwebkit2gtk-4_0-37-64bit
webkit2gtk4-minibrowser-debuginfo
libjavascriptcoregtk-4_1-0-64bit
libjavascriptcoregtk-4_0-18-64bit-debuginfo
webkitgtk-6_0-injected-bundles-debuginfo
typelib-1_0-WebKit2-4_0
libjavascriptcoregtk-4_1-0
typelib-1_0-JavaScriptCore-4_0
typelib-1_0-JavaScriptCore-6_0
webkit2gtk3-soup2-debugsource
libjavascriptcoregtk-4_0-18-debuginfo
libwebkit2gtk-4_0-37-debuginfo
webkit-jsc-4.1-debuginfo
typelib-1_0-WebKit2-4_1
libwebkit2gtk-4_1-0
webkit2gtk4-minibrowser
webkit2gtk3-soup2-minibrowser-debuginfo
libwebkitgtk-6_0-4
libjavascriptcoregtk-4_1-0-debuginfo
libjavascriptcoregtk-6_0-1
webkit-jsc-6.0-debuginfo
webkit2gtk-4_1-injected-bundles
webkit2gtk-4_0-injected-bundles
webkit2gtk3-devel
libwebkitgtk-6_0-4-debuginfo
libwebkit2gtk-4_1-0-debuginfo
typelib-1_0-WebKit2WebExtension-4_1
webkit2gtk4-devel
webkit2gtk3-minibrowser
webkit2gtk3-minibrowser-debuginfo
webkit-jsc-4-debuginfo
typelib-1_0-WebKit-6_0
Apple Safari

Install updates from vendor's website.

WPE WebKit - update to 2.52.5
WebKitGTK+ - update to 2.52.5
macOS - update to 26.6.2 25G83
Apple Safari - update to 26.6.1
iPadOS - update to 26.6.1 23G83
Apple iOS - update to 26.6.1 23G83
tvOS - update to 27.0 24J361
watchOS - update to 27.0 24R364
webkitgtk4 (Red Hat package) - update to 2.52.5-1.el7_9
webkit2gtk3 (Red Hat package) - addressed in versions 2.52.5-1.el8_6, 2.52.5-1.el8_8
webkit2gtk (Ubuntu package) - addressed in versions 2.52.6-0ubuntu0.24.04.1, 2.52.6-0ubuntu0.26.04.1
webkit2gtk4-debugsource - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-32bit-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-JavaScriptCore-4_1 - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKitWebProcessExtension-6_0 - update to 2.52.6-150600.12.74.1
webkit2gtk-4_0-injected-bundles-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-6_0-1-debuginfo - update to 2.52.6-150600.12.74.1
webkit2gtk-4_1-injected-bundles-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18 - update to 2.52.6-150600.12.74.1
webkit2gtk3-soup2-devel - update to 2.52.6-150600.12.74.1
webkit-jsc-4.1 - update to 2.52.6-150600.12.74.1
webkit2gtk3-debugsource - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-32bit-debuginfo - update to 2.52.6-150600.12.74.1
webkitgtk-6_0-injected-bundles - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37 - update to 2.52.6-150600.12.74.1
webkit-jsc-6.0 - update to 2.52.6-150600.12.74.1
webkit2gtk3-soup2-minibrowser - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit2WebExtension-4_0 - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-32bit - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-32bit - update to 2.52.6-150600.12.74.1
webkit-jsc-4 - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-32bit - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-32bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-32bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-32bit - update to 2.52.6-150600.12.74.1
WebKitGTK-4.1-lang - update to 2.52.6-150600.12.74.1
WebKitGTK-4.0-lang - update to 2.52.6-150600.12.74.1
WebKitGTK-6.0-lang - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-64bit - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-64bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-64bit - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-64bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-64bit-debuginfo - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-64bit - update to 2.52.6-150600.12.74.1
webkit2gtk4-minibrowser-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-64bit - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-64bit-debuginfo - update to 2.52.6-150600.12.74.1
webkitgtk-6_0-injected-bundles-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit2-4_0 - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0 - update to 2.52.6-150600.12.74.1
typelib-1_0-JavaScriptCore-4_0 - update to 2.52.6-150600.12.74.1
typelib-1_0-JavaScriptCore-6_0 - update to 2.52.6-150600.12.74.1
webkit2gtk3-soup2-debugsource - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-debuginfo - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-debuginfo - update to 2.52.6-150600.12.74.1
webkit-jsc-4.1-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit2-4_1 - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0 - update to 2.52.6-150600.12.74.1
webkit2gtk4-minibrowser - update to 2.52.6-150600.12.74.1
webkit2gtk3-soup2-minibrowser-debuginfo - update to 2.52.6-150600.12.74.1
libwebkitgtk-6_0-4 - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-6_0-1 - update to 2.52.6-150600.12.74.1
webkit-jsc-6.0-debuginfo - update to 2.52.6-150600.12.74.1
webkit2gtk-4_1-injected-bundles - update to 2.52.6-150600.12.74.1
webkit2gtk-4_0-injected-bundles - update to 2.52.6-150600.12.74.1
webkit2gtk3-devel - update to 2.52.6-150600.12.74.1
libwebkitgtk-6_0-4-debuginfo - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit2WebExtension-4_1 - update to 2.52.6-150600.12.74.1
webkit2gtk4-devel - update to 2.52.6-150600.12.74.1
webkit2gtk3-minibrowser - update to 2.52.6-150600.12.74.1
webkit2gtk3-minibrowser-debuginfo - update to 2.52.6-150600.12.74.1
webkit-jsc-4-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit-6_0 - update to 2.52.6-150600.12.74.1
visionOS - update to 27.0

• https://support.apple.com/en-us/148281
• https://webkitgtk.org/security/WSA-2026-0005.html

• Multiple vulnerabilities in WebKitGTK+ and WPE WebKit
• Multiple vulnerabilities in macOS Tahoe
• Multiple vulnerabilities in iOS 26 and iPadOS 26
• Multiple vulnerabilities in Apple Safari
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for webkitgtk4
• Red Hat Enterprise Linux 8 update for webkit2gtk3
• Red Hat Enterprise Linux 8 update for webkit2gtk3
• Ubuntu update for webkit2gtk
• SUSE update for webkit2gtk3
• Multiple vulnerabilities in Apple visionOS
• Multiple vulnerabilities in Apple watchOS
• Multiple vulnerabilities in Apple tvOS