WE
Product
WebKit
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add WebKit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-83596 | 8.8 | Aug 31 | Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature Affected: 1.10.0 |
| CVE-2026-78376 | 8.8 | Aug 24 | Webkitgtk: use-after-free of jscvalue function parameters Affected: 2.21.1 |
| CVE-2016-9643 | 7.5 | Mar 7 | The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar)… Affected: 2.4.11 |
| CVE-2016-9642 | 5.5 | Feb 3 | JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file Affected: All versions, or not specified |
| CVE-2010-1766 | – | Jul 22 | Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products,… Affected: through r56379 |
| CVE-2009-3933 | – | Nov 12 | WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript… Affected: through r50173 |
| CVE-2008-6059 | – | Feb 5 | xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which… Affected: All versions, or not specified |
Showing 7