CVE-2025-13947: Red Hat Enterprise Linux 6

High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.

Affected products

  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: before 0:2.50.3-2.el7_9 (fixed in 0:2.50.3-2.el7_9)
  • Red Hat Red Hat Enterprise Linux 8: before 0:2.50.3-1.el8_10 (fixed in 0:2.50.3-1.el8_10)
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support: before 0:2.50.3-2.el8_2 (fixed in 0:2.50.3-2.el8_2)
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: before 0:2.50.3-2.el8_4 (fixed in 0:2.50.3-2.el8_4)
  • Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: before 0:2.50.3-2.el8_4 (fixed in 0:2.50.3-2.el8_4)
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: before 0:2.50.3-2.el8_6 (fixed in 0:2.50.3-2.el8_6)
  • Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service: before 0:2.50.3-2.el8_6 (fixed in 0:2.50.3-2.el8_6)
  • Red Hat Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions: before 0:2.50.3-2.el8_6 (fixed in 0:2.50.3-2.el8_6)
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: before 0:2.50.3-2.el8_8 (fixed in 0:2.50.3-2.el8_8)
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions: before 0:2.50.3-2.el8_8 (fixed in 0:2.50.3-2.el8_8)
  • Red Hat Red Hat Enterprise Linux 9: before 0:2.50.3-1.el9_7 (fixed in 0:2.50.3-1.el9_7)
  • Red Hat Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions: before 0:2.50.3-1.el9_0 (fixed in 0:2.50.3-1.el9_0)
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions: before 0:2.50.3-1.el9_2 (fixed in 0:2.50.3-1.el9_2)
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: before 0:2.50.3-1.el9_4 (fixed in 0:2.50.3-1.el9_4)
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: before 0:2.50.3-1.el9_6 (fixed in 0:2.50.3-1.el9_6)
  • The WebKitGTK Team WebKitGTK: before 2.50.3 (fixed in 2.50.3)

Published 2025-12-03. Last modified 2026-09-25.