← Back

Webkitgtk

webkitgtk

Vendor: Webkitgtk • 131 CVEs

CVEs (131)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-28204
2Apple
Webkitgtk
7Ipados
Iphone OsMacos+4 more
Jun 17, 2026
Jun 23, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web c...Show more
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.Show less
CVE-2019-8720
3Redhat
WebkitgtkWpewebkit
23Codeready Linux Builder
Codeready Linux Builder EusCodeready Linux Builder For Arm64 Eus+20 more
Jun 17, 2026
Mar 6, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issu...Show more
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.Show less
CVE-2023-25363
1Webkitgtk
1Webkitgtk
Jun 17, 2026
Mar 2, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
CVE-2023-25362
1Webkitgtk
1Webkitgtk
Jun 17, 2026
Mar 2, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
CVE-2023-25361
1Webkitgtk
1Webkitgtk
Jun 17, 2026
Mar 2, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
CVE-2023-25360
1Webkitgtk
1Webkitgtk
Jun 17, 2026
Mar 2, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
CVE-2023-25358
2Fedoraproject
Webkitgtk
2Fedora
Webkitgtk
Jun 17, 2026
Mar 2, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
CVE-2022-42826
2Apple
Webkitgtk
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Feb 27, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code ex...Show more
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2022-32893
5Apple
DebianFedoraproject+2 more
8Debian Linux
FedoraIpados+5 more
Jun 17, 2026
Aug 24, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to...Show more
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.Show less
CVE-2022-2294
6Apple
FedoraprojectGoogle+3 more
12Chrome
Extra Packages For Enterprise LinuxFedora+9 more
Jun 17, 2026
Jul 28, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-30293
2Debian
Webkitgtk
2Debian Linux
Webkitgtk
Jun 17, 2026
May 6, 2022
N/A· v4
7.5 HIGH· v3
5.1 MEDIUM· v2
In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
CVE-2022-22590
2Apple
Webkitgtk
7Ipados
Iphone OsMacos+4 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content...Show more
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2021-45483
1Webkitgtk
1Webkitgtk
Jun 17, 2026
Dec 25, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889.
CVE-2021-45482
1Webkitgtk
1Webkitgtk
Jun 17, 2026
Dec 25, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.
CVE-2021-45481
1Webkitgtk
1Webkitgtk
Jun 17, 2026
Dec 25, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021...Show more
In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021-30889.Show less
CVE-2021-42762
4Debian
FedoraprojectWebkitgtk+1 more
4Debian Linux
FedoraWebkitgtk+1 more
Jun 17, 2026
Oct 20, 2021
N/A· v4
5.3 MEDIUM· v3
4.6 MEDIUM· v2
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox,...Show more
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133.Show less
CVE-2021-30952
5Apple
DebianFedoraproject+2 more
10Debian Linux
FedoraIpados+7 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may...Show more
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2021-21806
1Webkitgtk
1Webkitgtk
Jun 17, 2026
Jul 8, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution. The victim needs to...Show more
An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution. The victim needs to visit a malicious web site to trigger the vulnerability.Show less
CVE-2021-21779
3Debian
FedoraprojectWebkitgtk
3Debian Linux
FedoraWebkitgtk
Jun 17, 2026
Jul 8, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A...Show more
A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability.Show less
CVE-2021-21775
3Debian
FedoraprojectWebkitgtk
3Debian Linux
FedoraWebkitgtk
Jun 17, 2026
Jul 7, 2021
N/A· v4
8.0 HIGH· v3
6.0 MEDIUM· v2
A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory c...Show more
A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.Show less