WW
Product
Wpe Webkit
On CISA KEVExploited in the wildRansomware-linked
24
CVEs
6
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 9Low 0
Watch
Add Wpe Webkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: before 2.50.0 |
| CVE-2025-6558 In wildKEV | 8.8 | Jul 15 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Affected: before 2.48.5 |
| CVE-2019-8720 In wildKEV | 8.8 | Mar 6 | WebKitGTK Memory Corruption Vulnerability Affected: before 2.26.0 |
| CVE-2022-32893 In wildKEV | 8.8 | Aug 24 | Apple iOS and macOS Out-of-Bounds Write Vulnerability Affected: before 2.36.7 |
| CVE-2022-2294 RansomwareIn wildKEV | 8.8 | Jul 28 | WebRTC Heap Buffer Overflow Vulnerability Affected: before 2.36.5 |
| CVE-2021-30952 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Affected: before 2.34.4 |
| CVE-2020-13753 | 10.0 | Jul 14 | The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl Affected: before 2.28.3 |
| CVE-2025-43343 | 9.8 | Sep 15 | The issue was addressed with improved memory handling Affected: before 2.50.1 |
| CVE-2025-43342 | 9.8 | Sep 15 | A correctness issue was addressed with improved checks Affected: before 2.48.7 |
| CVE-2023-40397 | 9.8 | Sep 6 | The issue was addressed with improved checks Affected: before 2.40.5 |
| CVE-2020-10018 | 9.8 | Mar 2 | WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary… Affected: before 2.28.0 |
| CVE-2023-28198 | 8.8 | Aug 14 | A use-after-free issue was addressed with improved memory management Affected: before 2.40.1 |
| CVE-2020-11793 | 8.8 | Apr 17 | A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a… Affected: before 2.28.1 |
| CVE-2018-12293 | 8.8 | Jun 19 | The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE… Affected: before 2.20.1 |
| CVE-2019-6251 | 8.1 | Jan 14 | WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections Affected: before 2.24.1 |
| CVE-2024-23284 | 6.5 | Mar 8 | A logic issue was addressed with improved state management Affected: before 2.44.0 |
| CVE-2024-23280 | 6.5 | Mar 8 | An injection issue was addressed with improved validation Affected: before 2.44.0 |
| CVE-2024-23263 | 6.5 | Mar 8 | A logic issue was addressed with improved validation Affected: before 2.44.0 |
| CVE-2024-23254 | 6.5 | Mar 8 | The issue was addressed with improved UI handling Affected: before 2.44.0 |
| CVE-2024-27834 | 5.5 | May 14 | The issue was addressed with improved checks Affected: before 2.44.2 |
| CVE-2023-32370 | 5.3 | Sep 6 | A logic issue was addressed with improved validation Affected: before 2.40.1 |
| CVE-2021-42762 | 5.3 | Oct 20 | BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the… Affected: before 2.34.1 |
| CVE-2019-11070 | 5.3 | Apr 10 | WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an… Affected: before 2.24.1 |
| CVE-2023-42843 | 4.3 | Feb 21 | An inconsistent user interface issue was addressed with improved state management Affected: before 2.44.0 |
Showing 24