WE
Product
WebKitGTK
On CISA KEVExploited in the wildRansomware-linked
133
CVEs
15
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 73Medium 35Low 2
Watch
Add WebKitGTK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-2365 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2363 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2017-2350 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: before 2.16.3 |
| CVE-2016-4592 | 6.5 | Jul 22 | WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site Affected: before 2.10.5 |
| CVE-2016-1858 | 6.5 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive… Affected: before 2.12.0 |
| CVE-2020-3867 | 6.1 | Feb 27 | A logic issue was addressed with improved state management Affected: before 2.26.4 |
| CVE-2019-8813 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 2.26.4 |
| CVE-2019-8764 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 2.26.4 |
| CVE-2019-8719 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 2.26.4 |
| CVE-2019-8674 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 2.26.4 |
| CVE-2019-8625 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 2.26.4 |
| CVE-2018-4133 | 6.1 | Apr 3 | An issue was discovered in certain Apple products Affected: before 2.20.4 |
| CVE-2024-27834 | 5.5 | May 14 | The issue was addressed with improved checks Affected: before 2.44.2 |
| CVE-2023-32370 | 5.3 | Sep 6 | A logic issue was addressed with improved validation Affected: before 2.40.1 |
| CVE-2021-42762 | 5.3 | Oct 20 | BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the… Affected: before 2.34.1 |
| CVE-2013-7324 | 5.3 | Feb 17 | Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious javascript Affected: after 2.0.0 through 2.26.4 |
| CVE-2019-11070 | 5.3 | Apr 10 | WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an… Affected: before 2.24.1 |
| CVE-2017-1000122 | 5.3 | Nov 1 | The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial… Affected: before 2.16.3 |
| CVE-2023-42843 | 4.3 | Feb 21 | An inconsistent user interface issue was addressed with improved state management Affected: before 2.44.0 |
| CVE-2020-29623 | 3.3 | Apr 2 | "Clear History and Website Data" did not clear the history Affected: before 2.30.6 |
| CVE-2016-4583 | 3.1 | Jul 22 | WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web… Affected: before 2.12.2 |
| CVE-2010-1807 | – | Sep 10 | WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote… Affected: through 1.2.5; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4 |
| CVE-2010-1815 | – | Sep 9 | Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause… Affected: before 1.2.6 |
| CVE-2010-1814 | – | Sep 9 | WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 1.2.6 |
| CVE-2010-1812 | – | Sep 9 | Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause… Affected: before 1.2.6 |
| CVE-2010-3259 | – | Sep 7 | WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images… Affected: before 1.2.6 |
| CVE-2010-3257 | – | Sep 7 | Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote… Affected: before 1.2.6 |
| CVE-2010-3255 | – | Sep 7 | Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or… Affected: before 1.2.6 |
| CVE-2010-3119 | – | Aug 24 | Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service (memory corruption) or… Affected: before 1.2.6 |
| CVE-2010-3116 | – | Aug 24 | Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow… Affected: before 1.2.6 |
| CVE-2010-3115 | – | Aug 24 | Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via… Affected: before 1.2.6 |
| CVE-2010-3114 | – | Aug 24 | The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact… Affected: before 1.2.6 |
| CVE-2010-3113 | – | Aug 24 | Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service (memory… Affected: before 1.2.5 |