Webkit vulnerabilities | LiveThreat CVE Feed

Product

Webkit

by Apple · last CVE Dec 27, 2017

258

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities258 In the news0 Timeline

Severity mix

Critical 0High 39Medium 6Low 1

Severity

All severities258 Critical0 High39 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Webkit to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2010-1784	–	6%	Jul 30	The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on… Affected: All versions, or not specified
CVE-2010-1783	–	6%	Jul 30	WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic… Affected: All versions, or not specified
CVE-2010-1782	–	6%	Jul 30	WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1780	–	6%	Jul 30	Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6;… Affected: All versions, or not specified
CVE-2010-1778	–	2%	Jul 30	Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to… Affected: All versions, or not specified
CVE-2010-2441	–	2%	Jun 24	WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126,… Affected: All versions, or not specified
CVE-2010-2264	–	3%	Jun 11	The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly… Affected: All versions, or not specified
CVE-2010-1774	–	7%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses out-of-bounds memory during processing of HTML tables, which… Affected: All versions, or not specified
CVE-2010-1771	–	6%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1770	–	5%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle… Affected: All versions, or not specified
CVE-2010-1764	–	2%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, follows multiple redirections during form submission, which allows… Affected: All versions, or not specified
CVE-2010-1762	–	3%	Jun 11	Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers… Affected: All versions, or not specified
CVE-2010-1761	–	7%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1759	–	16%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1758	–	7%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1421	–	4%	Jun 11	The execCommand JavaScript function in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict… Affected: All versions, or not specified
CVE-2010-1419	–	7%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted remote attackers… Affected: All versions, or not specified
CVE-2010-1418	–	3%	Jun 11	Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers… Affected: All versions, or not specified
CVE-2010-0544	–	3%	Jun 11	Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers… Affected: All versions, or not specified
CVE-2010-1749	–	9%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1422	–	3%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle changes to keyboard focus that occur during… Affected: All versions, or not specified
CVE-2010-1417	–	7%	Jun 11	The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote… Affected: All versions, or not specified
CVE-2010-1416	–	3%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict the reading of a canvas that contains an… Affected: All versions, or not specified
CVE-2010-1415	–	7%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle libxml contexts, allows remote attackers to… Affected: All versions, or not specified
CVE-2010-1414	–	7%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1413	–	2%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances,… Affected: All versions, or not specified
CVE-2010-1412	–	7%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1410	–	7%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial… Affected: All versions, or not specified
CVE-2010-1409	–	3%	Jun 11	Incomplete blacklist vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to… Affected: All versions, or not specified
CVE-2010-1408	–	3%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to bypass intended restrictions on outbound… Affected: All versions, or not specified
CVE-2010-1406	–	2%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends an https URL in the Referer header of an http request in… Affected: All versions, or not specified
CVE-2010-1405	–	7%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1404	–	9%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1403	–	9%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in… Affected: All versions, or not specified
CVE-2010-1402	–	9%	Jun 11	Double free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1401	–	9%	Jun 11	Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on… Affected: All versions, or not specified
CVE-2010-1400	–	7%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1399	–	7%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during a selection change on a form… Affected: All versions, or not specified
CVE-2010-1398	–	9%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows… Affected: All versions, or not specified
CVE-2010-1397	–	9%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1396	–	9%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1395	–	3%	Jun 11	Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers… Affected: All versions, or not specified
CVE-2010-1394	–	3%	Jun 11	Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers… Affected: All versions, or not specified
CVE-2010-1393	–	2%	Jun 11	The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote… Affected: All versions, or not specified
CVE-2010-1392	–	7%	Jun 11	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute… Affected: All versions, or not specified
CVE-2010-1391	–	4%	Jun 11	Multiple directory traversal vulnerabilities in the (a) Local Storage and (b) Web SQL database implementations in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6… Affected: All versions, or not specified
CVE-2010-1390	–	3%	Jun 11	Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers… Affected: All versions, or not specified
CVE-2010-1389	–	3%	Jun 11	Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted… Affected: All versions, or not specified
CVE-2010-1388	–	3%	Jun 11	WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) drag and (2) paste operations for URLs,… Affected: All versions, or not specified
CVE-2010-1729	–	2%	May 6	WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to cause a denial of service (application crash) via JavaScript that writes… Affected: All versions, or not specified