Webkitgtk vulnerabilities

Products

• Webkitgtk 71
• Webkitgtk\+ 64

Newest

• the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 more Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature CVE-2026-83596 Fix available 8.8 HighAugust 31, 2026
• the webkitgtk team webkitgtk, webkit, red hat enterprise linux 6 +13 more +15 more Webkitgtk: use-after-free of jscvalue function parameters CVE-2026-78376 Fix available 8.8 HighAugust 24, 2026
• apple ipados, macos, safari +7 more +9 more The issue was addressed with improved memory handling. This issue is fixed in tvOS 26, Safari 26,... CVE-2025-43343 Fix available 9.8 CriticalSeptember 15, 2025
• apple ipados, macos, safari +7 more +9 more A correctness issue was addressed with improved checks. This issue is fixed in tvOS 26, Safari 26... CVE-2025-43342 Fix available 9.8 CriticalSeptember 15, 2025
• apple ipados, macos, safari +30 more +32 more The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,... CVE-2025-31277 In KEVPublic exploitFix available 8.8 HighJuly 29, 2025
• google chrome, chromium, apple ipados +8 more +10 more Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204... CVE-2025-6558 In KEVPublic exploitFix available EPSS 10.9% 8.8 HighJuly 15, 2025
• apple ipados, macos, safari +8 more +10 more The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5,... CVE-2024-27834 In KEVFix available 5.5 MediumMay 13, 2024
• apple ipados, macos, safari +9 more +11 more A logic issue was addressed with improved validation. This issue is fixed in tvOS 17.4, macOS... CVE-2024-23263 Fix available 6.5 MediumMarch 8, 2024
• apple ios, ipados, macos +9 more +11 more An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4,... CVE-2024-23280 Fix available 6.5 MediumMarch 8, 2024
• apple macos, safari, tvos +8 more +10 more The issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma... CVE-2024-23254 Fix available 6.5 MediumMarch 8, 2024
• apple ipados, macos, safari +8 more +10 more A logic issue was addressed with improved state management. This issue is fixed in tvOS 17.4,... CVE-2024-23284 Fix available 6.5 MediumMarch 8, 2024
• apple ipados, macos, tvos +7 more +9 more This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14... CVE-2024-23246 8.6 HighMarch 8, 2024
• apple macos, safari, ios and ipados +5 more +7 more An inconsistent user interface issue was addressed with improved state management. This issue is... CVE-2023-42843 Fix available 4.3 MediumFebruary 21, 2024
• apple ipados, macos, safari +6 more +8 more A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS... CVE-2023-42917 In KEVFix available 8.8 HighNovember 30, 2023
• apple ipados, macos, safari +6 more +8 more An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17... CVE-2023-42916 In KEVFix available EPSS 17.8% 6.5 MediumNovember 30, 2023
• webkit, webkitgtk, debian linux +1 more +3 more A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A... CVE-2023-39928 Fix available 8.8 HighSeptember 28, 2023
• apple macos, ipad os, ipados +13 more +15 more The issue was addressed with improved checks. This issue is fixed in Safari 16.6.1, macOS Ventura... CVE-2023-41993 In KEVPublic exploitFix available EPSS 23.7% 8.8 HighSeptember 21, 2023
• apple macos, webkitgtk, wpewebkit wpe webkit +2 more The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote... CVE-2023-40397 Fix available 9.8 CriticalAugust 5, 2023
• apple ipados, macos, safari +6 more +8 more The issue was addressed with improved checks. This issue is fixed in watchOS 9.6, iOS 16.6 and... CVE-2023-37450 In KEVFix available EPSS 18.9% 8.8 HighJuly 22, 2023
• apple ipados, macos, safari +4 more +6 more A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and... CVE-2023-32439 In KEVFix available EPSS 24.0% 8.8 HighJune 23, 2023
• apple ipados, macos, safari +7 more +9 more A use-after-free issue was addressed with improved memory management. This issue is fixed in... CVE-2023-32373 In KEVFix available EPSS 12.2% 8.8 HighJune 3, 2023
• apple ipados, macos, safari +6 more +8 more An out-of-bounds read was addressed with improved input validation. This issue is fixed in... CVE-2023-28204 In KEVFix available EPSS 14.3% 6.5 MediumJune 3, 2023
• redhat enterprise linux, the webkitgtk team webkitgtk, redhat enterprise linux eus +3 more +5 more A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use... CVE-2023-2203 Fix available 8.8 HighMay 9, 2023
• apple macos, webkitgtk, wpewebkit wpe webkit +2 more A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3.... CVE-2023-32370 Fix available 5.3 MediumMay 3, 2023
• apple ipados, macos, ios and ipados +3 more +5 more A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS... CVE-2023-28198 Fix available 8.8 HighMay 3, 2023
• apple ipados, macos, safari +2 more +4 more A use after free issue was addressed with improved memory management. This issue is fixed in... CVE-2022-42826 Fix available 8.8 HighFebruary 3, 2023
• webkitgtk A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in... CVE-2023-25363 Fix available 8.8 HighSeptember 28, 2022
• webkitgtk A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK... CVE-2023-25362 Fix available 8.8 HighSeptember 28, 2022
• webkitgtk A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8... CVE-2023-25361 Fix available 8.8 HighSeptember 28, 2022
• webkitgtk A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8... CVE-2023-25360 Fix available 8.8 HighSeptember 28, 2022
• webkitgtk, fedoraproject fedora +1 more A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8... CVE-2023-25358 Fix available 8.8 HighSeptember 28, 2022
• apple ipados, macos, safari +7 more +9 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... CVE-2022-32893 In KEVFix available 8.8 HighAugust 24, 2022
• google chrome, webrtc, apple ipados +9 more +11 more Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker... CVE-2022-2294 In KEVFix available EPSS 70.8% 8.8 HighJuly 11, 2022
• webkitgtk, debian linux +1 more In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore:... CVE-2022-30293 Fix available 7.5 HighMay 6, 2022
• apple ipados, macos, safari +5 more +7 more A use after free issue was addressed with improved memory management. This issue is fixed in iOS... CVE-2022-22590 Fix available 8.8 HighFebruary 11, 2022
• webkitgtk In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different... CVE-2021-45483 Fix available 6.5 MediumOctober 29, 2021
• webkitgtk In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore:... CVE-2021-45481 Fix available 6.5 MediumOctober 29, 2021
• webkitgtk, wpewebkit wpe webkit, debian linux +1 more +3 more BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass... CVE-2021-42762 Fix available 5.3 MediumOctober 20, 2021
• webkitgtk In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a... CVE-2021-45482 Fix available 6.5 MediumSeptember 20, 2021
• apple ipados, macos, safari +9 more +11 more Moderate: webkit2gtk3 security, bug fix, and enhancement update CVE-2021-30952 In KEVFix available 7.8 HighAugust 24, 2021
• webkit, webkitgtk, debian linux +1 more +3 more A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events... CVE-2021-21779 Fix available 6.8 MediumJuly 8, 2021
• webkit, webkitgtk, debian linux +1 more +3 more A use-after-free vulnerability exists in the way certain events are processed for ImageLoader... CVE-2021-21775 Fix available 6.8 MediumJuly 7, 2021
• webkit, webkitgtk +1 more An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A... CVE-2021-21806 Fix available 8.8 HighMarch 27, 2021
• apple ipados, macos, ios and ipados +5 more +7 more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2... CVE-2021-1870 In KEVFix available 9.8 CriticalMarch 24, 2021
• apple macos, tvos, watchos +5 more +7 more This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS... CVE-2021-1801 Fix available 6.5 MediumMarch 24, 2021
• apple macos, safari, tvos +6 more +8 more A port redirection issue was addressed with additional port validation. This issue is fixed in... CVE-2021-1799 Fix available 6.5 MediumMarch 24, 2021
• apple ipados, macos, tvos +7 more +9 more A type confusion issue was addressed with improved state handling. This issue is fixed in macOS... CVE-2021-1789 In KEVFix available EPSS 14.0% 8.8 HighMarch 24, 2021
• apple macos, mac os x, fedoraproject fedora +1 more +3 more This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS... CVE-2021-1765 Fix available 6.5 MediumMarch 24, 2021
• webkit, webkitgtk +1 more A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit... CVE-2020-13558 Fix available 8.8 HighFebruary 15, 2021
• apple ipados, macos, tvos +5 more +7 more "Clear History and Website Data" did not clear the history. The issue was addressed with improved... CVE-2020-29623 Fix available 3.3 LowDecember 31, 2020
• Show olderLoading…