Read the docs

WebKitGTK

Records134All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high77CVSS 7.0–8.9

Exploited now

WebKitGTK records in CISA KEV
TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability Priority HIGH 82KEV 2026-11-04TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-03-20TI-2021-11319 Apple Multiple Products Integer Overflow or Wraparound Vulnerability Priority CRITICAL 97KEV 2026-03-05TI-2025-05957 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Priority CRITICAL 97KEV 2025-07-22TI-2023-22995 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Priority CRITICAL 86KEV 2023-12-04TI-2023-22996 Apple Multiple Products WebKit Memory Corruption Vulnerability Priority CRITICAL 97KEV 2023-12-04

Components

Products in the NVD configurations · select one to filter the records
Webkitgtk 68 records CRITICAL Webkitgtk+ 64 records CRITICAL Webkit2gtk3 1 record MEDIUM

Records

68 records in Webkitgtk · all components

TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

Priority CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119
TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

Priority CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20
TI-2022-14420 CVE-2022-32893 · GHSA-qjpw-c5xf-g33j

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09931 Published 2022-08-24 Partial fix · 15.6, 12.5 CWE-787
TI-2022-02117 CVE-2022-2294 · GHSA-9q96-cwq7-cr4m

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70833 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-787
TI-2021-11319 CVE-2021-30952

Integer overflow in Apple watchOS

Priority CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06964 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-190
TI-2021-01502 CVE-2021-1789 · GHSA-c838-pj7m-89q4

Type confusion in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13975 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-843
TI-2019-06284 CVE-2019-8720 · GHSA-5cgp-g38q-m4xj

Memory corruption in webkitgtk

Priority CRITICAL 97KEV

A vulnerability was found in WebKit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01556 Published 2023-03-06 Partial fix CWE-119
TI-2019-06009 CVE-2019-8375 · GHSA-f6vf-7m59-gfmp

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+…

Priority MEDIUM 58

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote atta…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15697 Published 2019-02-24 No fix listed CWE-119
TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

Memory corruption in Apple Safari

Priority MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119
TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

Improper input validation in Apple Safari

Priority MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20
TI-2020-10662 CVE-2020-13584 · GHSA-w3wx-pfgj-qgv3

Use after free in Webkit

Priority MEDIUM 46

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04938 Published 2020-12-03 Partial fix CWE-416
TI-2010-03951 CVE-2010-4197 · GHSA-63hm-wg3m-vxc6

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44…

Priority MEDIUM 46

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02307 Published 2010-11-05 Fixed CWE-416
TI-2020-10621 CVE-2020-13543 · GHSA-mqwf-vg2c-5ch3

Use after free in Webkit

Priority MEDIUM 44

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03487 Published 2020-12-03 Partial fix CWE-416
Load more
Open these records in search →