{"schema":"vulnpedia.research/1","cve":"CVE-2026-102331","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","tags":["Release Notes","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"Chrome","modified":"2026-09-29T19:45:01.631Z","origins":[{"source":"mitre","sourceId":"Chrome","modified":"2026-09-29T19:45:01.631Z","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html"},{"source":"nvd","sourceId":"CVE-2026-102331","modified":"2026-09-30T13:15:08.430","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html"},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html"}]},{"url":"https://issues.chromium.org/issues/551673541","tags":["Permissions Required","vendor-reference"],"source":"mitre","sourceId":"Chrome","modified":"2026-09-29T19:45:01.631Z","origins":[{"source":"mitre","sourceId":"Chrome","modified":"2026-09-29T19:45:01.631Z","url":"https://issues.chromium.org/issues/551673541"},{"source":"nvd","sourceId":"CVE-2026-102331","modified":"2026-09-30T13:15:08.430","url":"https://issues.chromium.org/issues/551673541"},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://issues.chromium.org/issues/551673541"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102331","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-102331"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543583","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543583"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102331","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-102331"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102331","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102331"}]},{"source":"euvd","sourceId":"EUVD-2026-89373","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-89373","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-89373","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-89373"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_6:webkitgtk","product":"webkitgtk as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_6:webkitgtk-doc","product":"webkitgtk-doc as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_6:webkitgtk.src","product":"webkitgtk.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_7:webkitgtk3","product":"webkitgtk3 as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk3","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_7:webkitgtk3-doc","product":"webkitgtk3-doc as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk3-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_7:webkitgtk4","product":"webkitgtk4 as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_7:webkitgtk4-devel","product":"webkitgtk4-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_7:webkitgtk4-jsc","product":"webkitgtk4-jsc as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4-jsc","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_7:webkitgtk4-plugin-process-gtk2","product":"webkitgtk4-plugin-process-gtk2 as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkitgtk4-plugin-process-gtk2","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:webkit2gtk3","product":"webkit2gtk3 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkit2gtk3","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:webkit2gtk3-devel","product":"webkit2gtk3-devel as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkit2gtk3-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:webkit2gtk3-jsc-devel","product":"webkit2gtk3-jsc-devel as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:webkit2gtk3.src","product":"webkit2gtk3.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkit2gtk3?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_9:webkit2gtk3-devel","product":"webkit2gtk3-devel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkit2gtk3-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_9:webkit2gtk3-jsc","product":"webkit2gtk3-jsc as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_9:webkit2gtk3.src","product":"webkit2gtk3.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Avoid opening untrusted web content or navigating to unverified web pages within applications relying on WebKitGTK or Chromium.\n\nWhere feasible, execute web-rendering applications inside restricted containers or sandboxes with minimal user privileges to constrain the impact of potential code execution.\n\nIf web rendering is not required on server installations, remove optional packages providing WebKitGTK (such as webkit2gtk3 or webkitgtk4).\n\nCaveat: Removing WebKitGTK packages may remove dependent graphical components, including parts of desktop environments like GNOME. Headless server operations and terminal access will remain unaffected."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/webkit2gtk3?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_10:firefox","product":"firefox as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_10:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_10:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_10:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_7:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:firefox","product":"firefox as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:mozjs60","product":"mozjs60 as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mozjs60","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:mozjs60-devel","product":"mozjs60-devel as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mozjs60-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:mozjs60.src","product":"mozjs60.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mozjs60?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_8:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_9:firefox-x11","product":"firefox-x11 as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox-x11","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_9:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_9:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]},{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json","productId":"red_hat_enterprise_linux_9:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-102331","modified":"2026-10-16T15:28:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102331.json"}]}],"vendorCoverage":{"total":45,"shown":32,"omitted":13,"source":"redhat"}}