WE
Product
WebKitGTK
On CISA KEVExploited in the wildRansomware-linked
133
CVEs
15
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 73Medium 35Low 2
Watch
Add WebKitGTK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: before 2.50.0 |
| CVE-2025-6558 In wildKEV | 8.8 | Jul 15 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Affected: before 2.48.5 |
| CVE-2023-42917 In wildKEV | 8.8 | Nov 30 | Apple Multiple Products WebKit Memory Corruption Vulnerability Affected: before 2.42.3 |
| CVE-2023-41993 In wildKEV | 8.8 | Sep 21 | Apple Multiple Products WebKit Code Execution Vulnerability Affected: before 2.42.2 |
| CVE-2023-37450 In wildKEV | 8.8 | Jul 26 | Apple Multiple Products WebKit Code Execution Vulnerability Affected: before 2.42.3 |
| CVE-2023-32439 In wildKEV | 8.8 | Jun 23 | Apple Multiple Products WebKit Type Confusion Vulnerability Affected: before 2.42.3 |
| CVE-2023-32373 In wildKEV | 8.8 | Jun 23 | Apple Multiple Products WebKit Use-After-Free Vulnerability Affected: before 2.42.3 |
| CVE-2019-8720 In wildKEV | 8.8 | Mar 6 | WebKitGTK Memory Corruption Vulnerability Affected: before 2.26.0 |
| CVE-2022-32893 In wildKEV | 8.8 | Aug 24 | Apple iOS and macOS Out-of-Bounds Write Vulnerability Affected: before 2.36.7 |
| CVE-2022-2294 RansomwareIn wildKEV | 8.8 | Jul 28 | WebRTC Heap Buffer Overflow Vulnerability Affected: before 2.36.5 |
| CVE-2021-1789 In wildKEV | 8.8 | Apr 2 | Apple Multiple Products Type Confusion Vulnerability Affected: before 2.30.6 |
| CVE-2021-30952 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Affected: before 2.34.4 |
| CVE-2026-83596 | 8.8 | Aug 31 | Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature Affected: 1.10.0 |
| CVE-2026-78376 | 8.8 | Aug 24 | Webkitgtk: use-after-free of jscvalue function parameters Affected: 2.21.1 |
| CVE-2023-39928 | 8.8 | Oct 6 | A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5 Affected: 2.40.5 |
| CVE-2023-28198 | 8.8 | Aug 14 | A use-after-free issue was addressed with improved memory management Affected: before 2.40.1 |
| CVE-2023-25363 | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely Affected: before 2.36.8 |
| CVE-2023-25362 | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely Affected: before 2.36.8 |
| CVE-2023-25361 | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely Affected: before 2.36.8 |
| CVE-2023-25360 | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely Affected: before 2.36.8 |
| CVE-2023-25358 | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely Affected: before 2.36.8 |
| CVE-2022-42826 | 8.8 | Feb 27 | A use after free issue was addressed with improved memory management Affected: before 2.40.1 |
| CVE-2022-22590 | 8.8 | Mar 18 | A use after free issue was addressed with improved memory management Affected: before 2.36.7 |
| CVE-2021-21806 | 8.8 | Jul 8 | An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64 Affected: 2.30.3 |
| CVE-2021-21779 | 8.8 | Jul 8 | A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4 Affected: 2.30.4 |
| CVE-2020-13558 | 8.8 | Mar 3 | A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1 Affected: 2.30.1 |
| CVE-2020-13584 | 8.8 | Dec 3 | An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64 Affected: 2.30.1 |
| CVE-2020-13543 | 8.8 | Dec 3 | A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0 Affected: 2.30.0 |
| CVE-2020-11793 | 8.8 | Apr 17 | A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a… Affected: before 2.28.1 |
| CVE-2016-4761 | 8.8 | Jan 22 | WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS Affected: before 2.14.0 |
| CVE-2019-6234 | 8.8 | Mar 5 | A memory corruption issue was addressed with improved memory handling Affected: before 2.22.6 |
| CVE-2018-4213 | 8.8 | Jan 11 | In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an… Affected: before 2.22.0 |
| CVE-2018-4212 | 8.8 | Jan 11 | In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an… Affected: through 2.22.0 |
| CVE-2018-4210 | 8.8 | Jan 11 | In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in… Affected: before 2.22.0 |
| CVE-2018-4208 | 8.8 | Jan 11 | In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an… Affected: before 2.22.0 |
| CVE-2018-4207 | 8.8 | Jan 11 | In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an… Affected: before 2.22.0 |
| CVE-2018-12293 | 8.8 | Jun 19 | The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE… Affected: before 2.20.3 |
| CVE-2018-4165 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4163 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4162 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4129 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4128 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4127 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4125 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4122 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4120 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4119 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4118 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4114 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4101 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |