WE
Product
WebKitGTK
On CISA KEVExploited in the wildRansomware-linked
133
CVEs
15
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 73Medium 35Low 2
Watch
Add WebKitGTK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-2373 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2369 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2356 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2355 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2354 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2016-1859 | 8.8 | May 20 | The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 2.12.1 |
| CVE-2016-1857 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.12.3 |
| CVE-2016-1856 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.12.1 |
| CVE-2016-1854 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.12.1 |
| CVE-2016-1783 | 8.8 | Mar 24 | WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 2.10.5 |
| CVE-2016-1727 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.10.5 |
| CVE-2016-1724 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 2.10.5 |
| CVE-2010-4198 | 8.8 | Nov 6 | WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a… Affected: 1.2.6 |
| CVE-2010-4206 | 8.8 | Nov 5 | Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6,… Affected: before 1.2.6 |
| CVE-2019-6251 | 8.1 | Jan 14 | WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections Affected: before 2.24.1 |
| CVE-2021-21775 | 8.0 | Jul 7 | A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4 Affected: 2.30.4 |
| CVE-2020-27918 | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: before 2.30.6 |
| CVE-2017-2360 | 7.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2022-30293 | 7.5 | May 6 | In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in… Affected: through 2.36.0 |
| CVE-2018-11712 | 7.5 | Jun 4 | WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS… Affected: 2.20.0; 2.20.1 |
| CVE-2018-11646 | 7.5 | Jun 1 | webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through… Affected: through 2.21.3 |
| CVE-2015-2330 | 7.5 | Mar 10 | Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies Affected: through 2.6.5 |
| CVE-2010-4577 | 7.5 | Dec 22 | The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6,… Affected: before 1.2.6 |