WE
Product
WebKitGTK
On CISA KEVExploited in the wildRansomware-linked
133
CVEs
15
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 73Medium 35Low 2
Watch
Add WebKitGTK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-4165 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4163 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4162 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4129 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4128 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4127 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4125 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4122 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4120 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4119 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4118 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4114 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4101 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2017-2373 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2369 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2356 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2355 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2354 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2016-1859 | 8.8 | May 20 | The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 2.12.1 |
| CVE-2016-1857 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.12.3 |
| CVE-2016-1856 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.12.1 |
| CVE-2016-1854 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.12.1 |
| CVE-2016-1783 | 8.8 | Mar 24 | WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 2.10.5 |
| CVE-2016-1727 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.10.5 |
| CVE-2016-1724 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.10.5 |
| CVE-2010-4198 | 8.8 | Nov 6 | WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a… Affected: 1.2.6 |
| CVE-2010-4206 | 8.8 | Nov 5 | Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6,… Affected: before 1.2.6 |
| CVE-2019-6251 | 8.1 | Jan 14 | WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections Affected: before 2.24.1 |
| CVE-2021-21775 | 8.0 | Jul 7 | A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4 Affected: 2.30.4 |
| CVE-2020-27918 | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: before 2.30.6 |
| CVE-2017-2360 | 7.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2022-30293 | 7.5 | May 6 | In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in… Affected: through 2.36.0 |
| CVE-2018-11712 | 7.5 | Jun 4 | WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS… Affected: 2.20.0; 2.20.1 |
| CVE-2018-11646 | 7.5 | Jun 1 | webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through… Affected: through 2.21.3 |
| CVE-2015-2330 | 7.5 | Mar 10 | Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies Affected: through 2.6.5 |
| CVE-2010-4577 | 7.5 | Dec 22 | The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6,… Affected: before 1.2.6 |
| CVE-2024-23284 | 6.5 | Mar 8 | A logic issue was addressed with improved state management Affected: before 2.44.0 |
| CVE-2024-23280 | 6.5 | Mar 8 | An injection issue was addressed with improved validation Affected: before 2.44.0 |
| CVE-2024-23263 | 6.5 | Mar 8 | A logic issue was addressed with improved validation Affected: before 2.44.0 |
| CVE-2024-23254 | 6.5 | Mar 8 | The issue was addressed with improved UI handling Affected: before 2.44.0 |
| CVE-2021-45483 | 6.5 | Dec 25 | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889 Affected: before 2.32.4 |
| CVE-2021-45482 | 6.5 | Dec 25 | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889 Affected: before 2.32.4 |
| CVE-2021-45481 | 6.5 | Dec 25 | In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application… Affected: before 2.32.4 |
| CVE-2021-1801 | 6.5 | Apr 2 | This issue was addressed with improved iframe sandbox enforcement Affected: before 2.30.6 |
| CVE-2021-1799 | 6.5 | Apr 2 | A port redirection issue was addressed with additional port validation Affected: before 2.30.6 |
| CVE-2021-1765 | 6.5 | Apr 2 | This issue was addressed with improved iframe sandbox enforcement Affected: before 2.30.6 |
| CVE-2018-11713 | 6.5 | Jun 4 | WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0,… Affected: before 2.20.0 |
| CVE-2018-4146 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4117 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2018-4113 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |