WE
Product
Webkit
258
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 39Medium 6Low 1
Watch
Add Webkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-1126 | – | Mar 26 | The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible… Affected: All versions, or not specified |
| CVE-2010-0661 | – | Feb 18 | WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via… Affected: 52400 |
| CVE-2010-0659 | – | Feb 18 | The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to… Affected: through r53524 |
| CVE-2010-0656 | – | Feb 18 | WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a… Affected: through r51280 |
| CVE-2010-0651 | – | Feb 18 | WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download… Affected: through r53524 |
| CVE-2010-0647 | – | Feb 18 | WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as… Affected: through r53475 |
| CVE-2008-1025 | – | Apr 17 | Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a… Affected: All versions, or not specified |
| CVE-2007-3944 | – | Jul 23 | Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and… Affected: All versions, or not specified |