diff --git a/extra/qt6-webengine/PKGBUILD b/extra/qt6-webengine/PKGBUILD
index a5dcc50b3..39e381d5b 100644
--- a/extra/qt6-webengine/PKGBUILD
+++ b/extra/qt6-webengine/PKGBUILD
@@ -13,7 +13,7 @@ highmem=1
 pkgname=qt6-webengine
 _qtver=6.2.4
 pkgver=${_qtver/-/}
-pkgrel=1
+pkgrel=2
 arch=(x86_64)
 url='https://www.qt.io'
 license=(GPL3 LGPL3 FDL custom)
@@ -27,17 +27,20 @@ options=(debug)
 _pkgfn="${pkgname/6-/}-everywhere-src-$_qtver"
 source=(https://download.qt.io/official_releases/qt/${pkgver%.*}/$_qtver/submodules/$_pkgfn.tar.xz
         qt6-webengine-ffmpeg5.patch
+        https://download.qt.io/official_releases/qt/6.2/CVE-2022-1096-qtwebengine-6.2.diff
         0001-ARM-toolchain-fixes.patch
         0002-Fix-ARM-skia-ICE.patch
         0003-Run-blink-bindings-generation-single-threaded.patch)
 sha256sums=('2e3e96b7a0335b1f683fecf8863ff2930b1bed4df00ce2ff064fa26d0a49e2b1'
             'c50d3019626183e753c53a997dc8a55938847543aa3178d4c51f377be741c693'
+            '331117c3aebe6ae35a630e743a3e03018e66347a2a44d39963c383f083763008'
             '3dba0f507498ed078dbe5dc5753c593fa6babb7252be1cb964c404b62bf600ab'
             '20f5f470bdd350e40046eb11cd786730aaa777a2ad6b68d004f7464313792320'
             '005e5c1476b2c6e8edd6ab0637315cf268060090a7d3a89060a339f9ce4c9851')
 
 prepare() {
   patch -d $_pkgfn/src/3rdparty -p1 < qt6-webengine-ffmpeg5.patch # Fix build with ffmpeg 5
+  patch -d $_pkgfn -p1 < CVE-2022-1096-qtwebengine-6.2.diff
 
   cd $_pkgfn