← CVE Tracker
7.4HIGH
CVE-2025-13947 — A flaw was found in WebKitGTK.
Unknown · Unknown · Published 3 Dec 2025 · Modified 25 Sept 2026
Description
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
References
- https://access.redhat.com/errata/RHSA-2025:22789
- https://access.redhat.com/errata/RHSA-2025:22790
- https://access.redhat.com/errata/RHSA-2025:23110
- https://access.redhat.com/errata/RHSA-2025:23433
- https://access.redhat.com/errata/RHSA-2025:23434
- https://access.redhat.com/errata/RHSA-2025:23451
- https://access.redhat.com/errata/RHSA-2025:23452
- https://access.redhat.com/errata/RHSA-2025:23583
- https://access.redhat.com/errata/RHSA-2025:23591
- https://access.redhat.com/errata/RHSA-2025:23742
What to do
- Check whether Unknown is in your asset inventory.
- Patch in the next maintenance window; prioritise internet-facing systems.
- Record the decision in your risk register for audit evidence.
Share
Link: adminadda.com/cve/CVE-2025-13947