CVE-2023-25360: WebKitGTK

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

Affected products

• WebKitGTK WebKitGTK: before 2.36.8 (fixed in 2.36.8)

Published 2023-03-02. Last modified 2026-06-17.