Login Request a demo
WE
Product
WebKitGTK
by WebKitGTK · last CVE Aug 31, 2026
On CISA KEVExploited in the wildRansomware-linked
133
CVEs
15
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities133In the news5Timeline
Severity mix
Critical 11High 73Medium 35Low 2
Severity
All severities133Critical11High73Medium35Low2
Exploitation
On CISA KEV15Exploited in the wild15
Watch

Add WebKitGTK to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-42916
In wildKEV
6.5
18%
Nov 30
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Affected: before 2.42.3
CVE-2023-28204
In wildKEV
6.5
14%
Jun 23
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Affected: before 2.42.3
CVE-2024-23284
6.5
1%
Mar 8
A logic issue was addressed with improved state management
Affected: before 2.44.0
CVE-2024-23280
6.5
1%
Mar 8
An injection issue was addressed with improved validation
Affected: before 2.44.0
CVE-2024-23263
6.5
1%
Mar 8
A logic issue was addressed with improved validation
Affected: before 2.44.0
CVE-2024-23254
6.5
1%
Mar 8
The issue was addressed with improved UI handling
Affected: before 2.44.0
CVE-2021-45483
6.5
2%
Dec 25
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889
Affected: before 2.32.4
CVE-2021-45482
6.5
2%
Dec 25
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889
Affected: before 2.32.4
CVE-2021-45481
6.5
2%
Dec 25
In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application…
Affected: before 2.32.4
CVE-2021-1801
6.5
2%
Apr 2
This issue was addressed with improved iframe sandbox enforcement
Affected: before 2.30.6
CVE-2021-1799
6.5
2%
Apr 2
A port redirection issue was addressed with additional port validation
Affected: before 2.30.6
CVE-2021-1765
6.5
1%
Apr 2
This issue was addressed with improved iframe sandbox enforcement
Affected: before 2.30.6
CVE-2018-11713
6.5
2%
Jun 4
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0,…
Affected: before 2.20.0
CVE-2018-4146
6.5
1%
Apr 3
An issue was discovered in certain Apple products
Affected: before 2.20.4
CVE-2018-4117
6.5
3%
Apr 3
An issue was discovered in certain Apple products
Affected: before 2.20.4
CVE-2018-4113
6.5
2%
Apr 3
An issue was discovered in certain Apple products
Affected: before 2.20.4
CVE-2017-2365
6.5
7%
Feb 20
An issue was discovered in certain Apple products
Affected: before 2.16.3
CVE-2017-2363
6.5
7%
Feb 20
An issue was discovered in certain Apple products
Affected: before 2.16.3
CVE-2017-2350
6.5
2%
Feb 20
An issue was discovered in certain Apple products
Affected: before 2.16.3
CVE-2016-4592
6.5
2%
Jul 22
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site
Affected: before 2.10.5
CVE-2016-1858
6.5
2%
May 20
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive…
Affected: before 2.12.0
CVE-2020-3867
6.1
1%
Feb 27
A logic issue was addressed with improved state management
Affected: before 2.26.4
CVE-2019-8813
6.1
1%
Dec 18
A logic issue was addressed with improved state management
Affected: before 2.26.4
CVE-2019-8764
6.1
1%
Dec 18
A logic issue was addressed with improved state management
Affected: before 2.26.4
CVE-2019-8719
6.1
1%
Dec 18
A logic issue was addressed with improved state management
Affected: before 2.26.4
CVE-2019-8674
6.1
1%
Dec 18
A logic issue was addressed with improved state management
Affected: before 2.26.4
CVE-2019-8625
6.1
1%
Dec 18
A logic issue was addressed with improved state management
Affected: before 2.26.4
CVE-2018-4133
6.1
1%
Apr 3
An issue was discovered in certain Apple products
Affected: before 2.20.4
CVE-2024-27834
5.5
1%
May 14
The issue was addressed with improved checks
Affected: before 2.44.2
CVE-2023-32370
5.3
1%
Sep 6
A logic issue was addressed with improved validation
Affected: before 2.40.1
CVE-2021-42762
5.3
1%
Oct 20
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the…
Affected: before 2.34.1
CVE-2013-7324
5.3
1%
Feb 17
Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious javascript
Affected: after 2.0.0 through 2.26.4
CVE-2019-11070
5.3
3%
Apr 10
WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an…
Affected: before 2.24.1
CVE-2017-1000122
5.3
1%
Nov 1
The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial…
Affected: before 2.16.3
CVE-2023-42843
4.3
1%
Feb 21
An inconsistent user interface issue was addressed with improved state management
Affected: before 2.44.0
Showing 35