WebKitGTK

Records134All Threatist records

Exploited (KEV)16In CISA KEV

CVSS critical18CVSS 9.0–10.0

CVSS high77CVSS 7.0–8.9

Exploited now

WebKitGTK records in CISA KEV

TI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability HIGH 82KEV 2026-11-04 TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability CRITICAL 97KEV 2026-03-20 TI-2021-11319 Apple Multiple Products Integer Overflow or Wraparound Vulnerability CRITICAL 97KEV 2026-03-05 TI-2025-05957 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability CRITICAL 97KEV 2025-07-22 TI-2023-22995 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability CRITICAL 86KEV 2023-12-04 TI-2023-22996 Apple Multiple Products WebKit Memory Corruption Vulnerability CRITICAL 97KEV 2023-12-04

Components

Products in the NVD configurations · select one to filter the records

Webkitgtk 68 records CRITICAL Webkitgtk+ 64 records CRITICAL Webkit2gtk3 1 record MEDIUM

Records

64 records in Webkitgtk+ · all components

TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787

TI-2023-22374 CVE-2023-41993 · GHSA-2hcr-79rm-r8rp

Improper check for unusual conditions in Apple macOS

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23709 Published 2023-09-21 Partial fix · 14 CWE-754

TI-2023-19062 CVE-2023-37450 · GHSA-v874-wp44-mhr4

Apple Safari: Processing web content may lead to arbitrary code execution

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.1895 Published 2023-07-26 Partial fix · 16.5, 16.6 +2

TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843

TI-2023-15664 CVE-2023-32373 · GHSA-3x5r-c923-f923

Use after free in Apple macOS

CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12172 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-416

TI-2023-22995 CVE-2023-42916 · GHSA-95hw-v8fq-666q

Out-of-bounds read in Apple Safari

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17823 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-125

TI-2023-12768 CVE-2023-28204 · GHSA-m85j-wjrj-c4rg

Out-of-bounds read in Apple macOS

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.14292 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-125

TI-2018-08332 CVE-2018-11646 · GHSA-q2c8-4vmf-78h5

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in…

HIGH 70

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.68018 Published 2018-06-01 No fix listed

TI-2018-03118 CVE-2018-4162 · GHSA-pvpm-cq3w-vfg5

Memory corruption in Apple WebKit

HIGH 65

An issue was discovered in certain Apple products.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.37844 Published 2018-04-03 No fix listed CWE-119

TI-2019-06009 CVE-2019-8375 · GHSA-f6vf-7m59-gfmp

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+…

MEDIUM 58

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote atta…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15697 Published 2019-02-24 No fix listed CWE-119

TI-2017-14458 CVE-2017-1000121 · GHSA-rv46-gc6r-8ffx

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly…

MEDIUM 51

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01201 Published 2017-11-01 No fix listed CWE-190

TI-2018-08810 CVE-2018-12293 · GHSA-g7g2-cvmj-5ppx

The getImageData function in the ImageBufferCairo class in…

MEDIUM 50

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerab…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.10033 Published 2018-06-19 No fix listed CWE-190

TI-2017-01654 CVE-2017-2373 · GHSA-33q2-wm99-m8f7

Memory corruption in Apple WebKit

MEDIUM 47

An issue was discovered in certain Apple products.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0607 Published 2017-02-20 No fix listed CWE-119

TI-2017-01650 CVE-2017-2369 · GHSA-m7gq-2xqf-2x46

Memory corruption in Apple WebKit

MEDIUM 47

An issue was discovered in certain Apple products.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0607 Published 2017-02-20 No fix listed CWE-119

TI-2018-09276 CVE-2018-12911 · GHSA-jc5j-6mrr-7p3r

WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the…

MEDIUM 46

WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01728 Published 2018-07-19 No fix listed CWE-787

TI-2016-01582 CVE-2016-1727 · GHSA-pr7h-529m-qm6h

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1…

MEDIUM 45

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a differen…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.04367 Published 2016-02-01 No fix listed CWE-119

TI-2016-01637 CVE-2016-1783 · GHSA-p7g6-c2vg-r355

WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote…

MEDIUM 44

WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03132 Published 2016-03-24 No fix listed CWE-119

TI-2016-01712 CVE-2016-1859 · GHSA-38xg-gj4r-c6w4

The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS…

MEDIUM 43

The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02579 Published 2016-05-20 No fix listed CWE-119

TI-2016-01710 CVE-2016-1857 · GHSA-68cm-fjjx-wg58

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1…

MEDIUM 43

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a differen…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02894 Published 2016-05-20 No fix listed CWE-119

TI-2016-01709 CVE-2016-1856 · GHSA-p26q-77vf-4pcg

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1…

MEDIUM 43

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02591 Published 2016-05-20 No fix listed CWE-119

TI-2016-01707 CVE-2016-1854 · GHSA-6m76-6xhh-37hj

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1…

MEDIUM 43

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02579 Published 2016-05-20 No fix listed CWE-119

TI-2016-01579 CVE-2016-1724 · GHSA-3hfj-59gc-vp5m

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1…

MEDIUM 43

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02615 Published 2016-02-01 No fix listed CWE-119

TI-2019-04432 CVE-2019-6234 · GHSA-9xvg-x75r-p5hp

Out-of-bounds write in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved memory handling.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01799 Published 2019-03-05 Fixed in iOS 12.1.3, tvOS 12.1.2 +3 CWE-787

TI-2018-03168 CVE-2018-4213 · GHSA-p6hh-6rh4-v28w

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3…

MEDIUM 42

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02017 Published 2019-01-11 No fix listed CWE-20

TI-2018-03167 CVE-2018-4212 · GHSA-v279-g494-j4v4

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3…

MEDIUM 42

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02064 Published 2019-01-11 No fix listed

Open these records in search →

Critical	18
High	77
Medium	37
Low	2
No CVSS	0