CVE-2023-25358: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

Affected products

• Fedoraproject Fedora: version 38 only
• WebKitGTK WebKitGTK: before 2.36.8 (fixed in 2.36.8)

Published 2023-03-02. Last modified 2026-06-17.