WE
Vendor
WebKitGTK
134
CVEs
15
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-83596 | WE WebKitGTK WebKitGTK | 8.8 | Aug 31 | Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature |
| CVE-2026-78376 | WE WebKitGTK WebKitGTK | 8.8 | Aug 24 | Webkitgtk: use-after-free of jscvalue function parameters |
| CVE-2025-43343 | WE Webkitgtk Webkitgtk | 9.8 | Sep 15 | The issue was addressed with improved memory handling |
| CVE-2025-43342 | WE Webkitgtk Webkitgtk | 9.8 | Sep 15 | A correctness issue was addressed with improved checks |
| CVE-2025-31277 In wildKEV | WE Webkitgtk Webkitgtk | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability |
| CVE-2025-6558 In wildKEV | WE Webkitgtk Webkitgtk | 8.8 | Jul 15 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability |
| CVE-2024-27834 | WE Webkitgtk Webkitgtk | 5.5 | May 14 | The issue was addressed with improved checks |
| CVE-2024-23284 | WE Webkitgtk Webkitgtk | 6.5 | Mar 8 | A logic issue was addressed with improved state management |
| CVE-2024-23280 | WE Webkitgtk Webkitgtk | 6.5 | Mar 8 | An injection issue was addressed with improved validation |
| CVE-2024-23263 | WE Webkitgtk Webkitgtk | 6.5 | Mar 8 | A logic issue was addressed with improved validation |
| CVE-2024-23254 | WE Webkitgtk Webkitgtk | 6.5 | Mar 8 | The issue was addressed with improved UI handling |
| CVE-2023-42843 | WE Webkitgtk Webkitgtk | 4.3 | Feb 21 | An inconsistent user interface issue was addressed with improved state management |
| CVE-2023-42917 In wildKEV | WE Webkitgtk+ Webkitgtk | 8.8 | Nov 30 | Apple Multiple Products WebKit Memory Corruption Vulnerability |
| CVE-2023-42916 In wildKEV | WE Webkitgtk+ Webkitgtk | 6.5 | Nov 30 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability |
| CVE-2023-39928 | WE Webkitgtk Webkitgtk | 8.8 | Oct 6 | A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5 |
| CVE-2023-41993 In wildKEV | WE Webkitgtk+ Webkitgtk | 8.8 | Sep 21 | Apple Multiple Products WebKit Code Execution Vulnerability |
| CVE-2023-40397 | WE Webkitgtk Webkitgtk | 9.8 | Sep 6 | The issue was addressed with improved checks |
| CVE-2023-32370 | WE Webkitgtk Webkitgtk | 5.3 | Sep 6 | A logic issue was addressed with improved validation |
| CVE-2023-28198 | WE Webkitgtk Webkitgtk | 8.8 | Aug 14 | A use-after-free issue was addressed with improved memory management |
| CVE-2023-37450 In wildKEV | WE Webkitgtk+ Webkitgtk | 8.8 | Jul 26 | Apple Multiple Products WebKit Code Execution Vulnerability |
| CVE-2023-32373 In wildKEV | WE Webkitgtk+ Webkitgtk | 8.8 | Jun 23 | Apple Multiple Products WebKit Use-After-Free Vulnerability |
| CVE-2023-32439 In wildKEV | WE Webkitgtk+ Webkitgtk | 8.8 | Jun 23 | Apple Multiple Products WebKit Type Confusion Vulnerability |
| CVE-2023-28204 In wildKEV | WE Webkitgtk+ Webkitgtk | 6.5 | Jun 23 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability |
| CVE-2023-2203 | WE Webkit2gtk3 Webkitgtk | 8.8 | May 17 | A flaw was found in the WebKitGTK package |
| CVE-2019-8720 In wildKEV | WE Webkitgtk Webkitgtk | 8.8 | Mar 6 | WebKitGTK Memory Corruption Vulnerability |
| CVE-2023-25363 | WE Webkitgtk Webkitgtk | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely |
| CVE-2023-25362 | WE Webkitgtk Webkitgtk | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely |
| CVE-2023-25361 | WE Webkitgtk Webkitgtk | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely |
| CVE-2023-25360 | WE Webkitgtk Webkitgtk | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely |
| CVE-2023-25358 | WE Webkitgtk Webkitgtk | 8.8 | Mar 2 | A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely |
| CVE-2022-42826 | WE Webkitgtk+ Webkitgtk | 8.8 | Feb 27 | A use after free issue was addressed with improved memory management |
| CVE-2022-32893 In wildKEV | WE Webkitgtk Webkitgtk | 8.8 | Aug 24 | Apple iOS and macOS Out-of-Bounds Write Vulnerability |
| CVE-2022-2294 RansomwareIn wildKEV | WE Webkitgtk Webkitgtk | 8.8 | Jul 28 | WebRTC Heap Buffer Overflow Vulnerability |
| CVE-2022-30293 | WE Webkitgtk Webkitgtk | 7.5 | May 6 | In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in… |
| CVE-2022-22590 | WE Webkitgtk Webkitgtk | 8.8 | Mar 18 | A use after free issue was addressed with improved memory management |
| CVE-2021-45483 | WE Webkitgtk Webkitgtk | 6.5 | Dec 25 | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889 |
| CVE-2021-45482 | WE Webkitgtk Webkitgtk | 6.5 | Dec 25 | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889 |
| CVE-2021-45481 | WE Webkitgtk Webkitgtk | 6.5 | Dec 25 | In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application… |
| CVE-2021-42762 | WE Webkitgtk Webkitgtk | 5.3 | Oct 20 | BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the… |
| CVE-2021-30952 In wildKEV | WE Webkitgtk Webkitgtk | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability |
| CVE-2021-21806 | WE Webkitgtk Webkitgtk | 8.8 | Jul 8 | An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64 |
| CVE-2021-21779 | WE Webkitgtk Webkitgtk | 8.8 | Jul 8 | A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4 |
| CVE-2021-21775 | WE Webkitgtk Webkitgtk | 8.0 | Jul 7 | A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4 |
| CVE-2021-1801 | WE Webkitgtk Webkitgtk | 6.5 | Apr 2 | This issue was addressed with improved iframe sandbox enforcement |
| CVE-2021-1799 | WE Webkitgtk Webkitgtk | 6.5 | Apr 2 | A port redirection issue was addressed with additional port validation |
| CVE-2021-1765 | WE Webkitgtk Webkitgtk | 6.5 | Apr 2 | This issue was addressed with improved iframe sandbox enforcement |
| CVE-2020-29623 | WE Webkitgtk Webkitgtk | 3.3 | Apr 2 | "Clear History and Website Data" did not clear the history |
| CVE-2021-1870 In wildKEV | WE Webkitgtk Webkitgtk | 9.8 | Apr 2 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability |
| CVE-2021-1789 In wildKEV | WE Webkitgtk Webkitgtk | 8.8 | Apr 2 | Apple Multiple Products Type Confusion Vulnerability |
| CVE-2020-13558 | WE Webkitgtk Webkitgtk | 8.8 | Mar 3 | A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1 |
| CVE-2020-27918 | WE Webkitgtk+ Webkitgtk | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management |
| CVE-2020-13584 | WE Webkitgtk Webkitgtk | 8.8 | Dec 3 | An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64 |
| CVE-2020-13543 | WE Webkitgtk Webkitgtk | 8.8 | Dec 3 | A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0 |
| CVE-2020-13753 | WE Webkitgtk Webkitgtk | 10.0 | Jul 14 | The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl |
| CVE-2020-11793 | WE Webkitgtk Webkitgtk | 8.8 | Apr 17 | A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a… |
| CVE-2020-10018 | WE Webkitgtk Webkitgtk | 9.8 | Mar 2 | WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary… |
| CVE-2020-3867 | WE Webkitgtk Webkitgtk | 6.1 | Feb 27 | A logic issue was addressed with improved state management |
| CVE-2013-7324 | WE Webkitgtk Webkitgtk | 5.3 | Feb 17 | Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious javascript |
| CVE-2016-4761 | WE Webkitgtk+ Webkitgtk | 8.8 | Jan 22 | WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS |
| CVE-2019-8813 | WE Webkitgtk+ Webkitgtk | 6.1 | Dec 18 | A logic issue was addressed with improved state management |