WW
Product
Wpe Webkit
On CISA KEVExploited in the wildRansomware-linked
24
CVEs
6
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 9Low 0
Watch
Add Wpe Webkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-13753 | 10.0 | Jul 14 | The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl Affected: before 2.28.3 |
| CVE-2025-43343 | 9.8 | Sep 15 | The issue was addressed with improved memory handling Affected: before 2.50.1 |
| CVE-2025-43342 | 9.8 | Sep 15 | A correctness issue was addressed with improved checks Affected: before 2.48.7 |
| CVE-2023-40397 | 9.8 | Sep 6 | The issue was addressed with improved checks Affected: before 2.40.5 |
| CVE-2020-10018 | 9.8 | Mar 2 | WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary… Affected: before 2.28.0 |
Showing 5
