Read the docs

WebKitGTK

Records134All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high77CVSS 7.0–8.9

Exploited now

WebKitGTK records in CISA KEV
TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability Priority HIGH 82KEV 2026-11-04TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-03-20TI-2021-11319 Apple Multiple Products Integer Overflow or Wraparound Vulnerability Priority CRITICAL 97KEV 2026-03-05TI-2025-05957 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Priority CRITICAL 97KEV 2025-07-22TI-2023-22995 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Priority CRITICAL 86KEV 2023-12-04TI-2023-22996 Apple Multiple Products WebKit Memory Corruption Vulnerability Priority CRITICAL 97KEV 2023-12-04

Components

Products in the NVD configurations · select one to filter the records
Webkitgtk 68 records CRITICAL Webkitgtk+ 64 records CRITICAL Webkit2gtk3 1 record MEDIUM

Records

134 records

TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

Priority CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119
TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

Priority CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20
TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787
TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843
TI-2023-15664 CVE-2023-32373 · GHSA-3x5r-c923-f923

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12172 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-416
TI-2022-14420 CVE-2022-32893 · GHSA-qjpw-c5xf-g33j

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09931 Published 2022-08-24 Partial fix · 15.6, 12.5 CWE-787
TI-2022-02117 CVE-2022-2294 · GHSA-9q96-cwq7-cr4m

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70833 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-787
TI-2021-11319 CVE-2021-30952

Integer overflow in Apple watchOS

Priority CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06964 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-190
TI-2021-01502 CVE-2021-1789 · GHSA-c838-pj7m-89q4

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13975 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-843
TI-2019-06284 CVE-2019-8720 · GHSA-5cgp-g38q-m4xj

Memory corruption in webkitgtk

Priority CRITICAL 97KEV

A vulnerability was found in WebKit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01556 Published 2023-03-06 Partial fix CWE-119
TI-2023-22995 CVE-2023-42916 · GHSA-95hw-v8fq-666q

Out-of-bounds read in Apple Safari

Priority CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17823 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-125
TI-2023-12768 CVE-2023-28204 · GHSA-m85j-wjrj-c4rg

Out-of-bounds read in Apple macOS

Priority CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.14292 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-125
TI-2018-03118 CVE-2018-4162 · GHSA-pvpm-cq3w-vfg5

Memory corruption in Apple WebKit

Priority HIGH 65

An issue was discovered in certain Apple products.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.37844 Published 2018-04-03 No fix listed CWE-119
TI-2019-06009 CVE-2019-8375 · GHSA-f6vf-7m59-gfmp

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+…

Priority MEDIUM 58

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote atta…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15697 Published 2019-02-24 No fix listed CWE-119
TI-2017-14458 CVE-2017-1000121 · GHSA-rv46-gc6r-8ffx

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly…

Priority MEDIUM 51

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01201 Published 2017-11-01 No fix listed CWE-190
TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

Memory corruption in Apple Safari

Priority MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119
TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

Improper input validation in Apple Safari

Priority MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20
TI-2018-08810 CVE-2018-12293 · GHSA-g7g2-cvmj-5ppx

The getImageData function in the ImageBufferCairo class in…

Priority MEDIUM 50

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerab…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.10033 Published 2018-06-19 No fix listed CWE-190
Load more
Open these records in search →