WE
Vendor
WebKit
13
CVEs
0
On KEV
0
New 30D
Products
WE8.8
WebKit
WebKit
7 CVEs0 on KEV0 new
WE8.8
Webkitgtk+
Webkit
5 CVEs0 on KEV0 new
JA–
Javascriptcore
Webkit
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-83596 | WE WebKit WebKit | 8.8 | Aug 31 | Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature |
| CVE-2026-78376 | WE WebKit WebKit | 8.8 | Aug 24 | Webkitgtk: use-after-free of jscvalue function parameters |
| CVE-2020-9952 | WE Webkitgtk+ Webkit | 7.1 | Oct 16 | An input validation issue was addressed with improved input validation |
| CVE-2020-9951 | WE Webkitgtk+ Webkit | 8.8 | Oct 16 | A use after free issue was addressed with improved memory management |
| CVE-2020-9948 | WE Webkitgtk+ Webkit | 8.8 | Oct 16 | A type confusion issue was addressed with improved memory handling |
| CVE-2018-4209 | WE Webkitgtk+ Webkit | 8.8 | Jan 11 | In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an… |
| CVE-2018-12294 | WE Webkitgtk+ Webkit | 8.8 | Jun 19 | WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a… |
| CVE-2016-9643 | WE Webkit Webkit | 7.5 | Mar 7 | The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar)… |
| CVE-2016-9642 | WE Webkit Webkit | 5.5 | Feb 3 | JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file |
| CVE-2010-1766 | WE Webkit Webkit | – | Jul 22 | Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products,… |
| CVE-2009-3933 | WE Webkit Webkit | – | Nov 12 | WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript… |
| CVE-2008-6059 | WE Webkit Webkit | – | Feb 5 | xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which… |
| CVE-2008-1590 | JA Javascriptcore Webkit | – | Jul 14 | JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute… |