Webkit vulnerabilities

Products

• Webkit 14
• Webkitgtk\+ 5

Newest

• the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +11 more +13 more Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature CVE-2026-83596 Fix available 8.8 HighAugust 31, 2026
• the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +11 more +13 more Webkitgtk: use-after-free of jscvalue function parameters CVE-2026-78376 Fix available 8.8 HighAugust 24, 2026
• webkit, webkitgtk, debian linux +1 more +3 more A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A... CVE-2023-39928 Fix available 8.8 HighSeptember 28, 2023
• webkit, webkitgtk, debian linux +1 more +3 more A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events... CVE-2021-21779 Fix available 6.8 MediumJuly 8, 2021
• webkit, webkitgtk, debian linux +1 more +3 more A use-after-free vulnerability exists in the way certain events are processed for ImageLoader... CVE-2021-21775 Fix available 6.8 MediumJuly 7, 2021
• webkit, webkitgtk +1 more An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A... CVE-2021-21806 Fix available 8.8 HighMarch 27, 2021
• webkit, webkitgtk +1 more A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit... CVE-2020-13558 Fix available 8.8 HighFebruary 15, 2021
• webkit, webkitgtk, fedoraproject fedora +2 more An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A... CVE-2020-13584 Fix available 8.8 HighNovember 23, 2020
• webkit, webkitgtk +1 more A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0.... CVE-2020-13543 Fix available 8.8 HighNovember 23, 2020
• apple safari, icloud, ipados +6 more +8 more A use after free issue was addressed with improved memory management. This issue is fixed in... CVE-2020-9951 Fix available 8.8 HighOctober 16, 2020
• apple safari, debian linux, webkit webkitgtk\+ +2 more A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari... CVE-2020-9948 Fix available 8.8 HighOctober 16, 2020
• apple icloud, icloud for windows, ios +7 more +9 more An input validation issue was addressed with improved input validation. This issue is fixed in... CVE-2020-9952 Fix available 7.1 HighAugust 3, 2020
• apple icloud, itunes, safari +5 more +7 more In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS... CVE-2018-4209 Fix available 8.8 HighSeptember 28, 2018
• webkit webkitgtk\+ WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to... CVE-2018-12294 Fix available 8.8 HighJune 19, 2018
• webkit The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory... CVE-2016-9643 Fix available 7.5 HighMarch 7, 2017
• webkit JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read)... CVE-2016-9642 Fix available 5.5 MediumFebruary 3, 2017
• digia qt, webkit +1 more Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets... CVE-2010-1766 7.5 HighJuly 22, 2010
• webkit WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to... CVE-2009-3933 5.0 MediumNovember 12, 2009
• webkit xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from... CVE-2008-6059 5.0 MediumFebruary 5, 2009
• webkit javascriptcore JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly... CVE-2008-1590 6.8 MediumJuly 14, 2008