Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Webkitgtk HIGH 8.8
CVE-2023-25361

A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

Fix: 2.36.8+
Fix from $1,950 2023-03-02
Webkitgtk HIGH 8.8
CVE-2023-25362

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotel…

Fix: 2.36.8+
Fix from $1,950 2023-03-02
Webkitgtk HIGH 8.8
CVE-2023-25363

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code re…

Fix: 2.36.8+
Fix from $1,950 2023-03-02
Webkitgtk HIGH 8.8
CVE-2023-25360

A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

Fix: 2.36.8+
Fix from $1,950 2023-03-02
Webkitgtk MEDIUM 6.5
CVE-2021-45481

In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation v…

Fix: 2.32.4+
Fix from $1,600 2021-12-25
Webkitgtk MEDIUM 6.5
CVE-2021-45482

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.

Fix: 2.32.4+
Fix from $1,600 2021-12-25
Webkitgtk MEDIUM 6.5
CVE-2021-45483

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889.

Fix: 2.32.4+
Fix from $1,600 2021-12-25
Webkitgtk HIGH 8.8
CVE-2021-21806

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can cause a use-after-f…

No fix yet
Fix from $1,950 2021-07-08
Webkitgtk HIGH 8.8
CVE-2020-13558

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can …

No fix yet
Fix from $1,950 2021-03-03
Webkitgtk HIGH 8.8
CVE-2020-13543

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after…

No fix yet
Fix from $1,950 2020-12-03
Webkitgtk MEDIUM 5.3
CVE-2013-7324

Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via …

Fix: after 2.26.4
Fix from $1,600 2020-02-17
Webkitgtk MEDIUM 5.3
CVE-2019-11070

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH…

Fix: 2.24.1+
Fix from $1,600 2019-04-10
Webkitgtk\+ HIGH 7.5
CVE-2018-11712

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20…

Patch available
Fix from $1,950 2018-06-04
Webkitgtk\+ MEDIUM 6.5
CVE-2018-11713

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 …

Fix: 2.20.0 / 2.62.0+
Fix from $1,600 2018-06-04
Webkitgtk\+ HIGH 7.5
CVE-2018-11646EPSS 68%

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as us…

Fix: after 2.21.3
Fix from $1,950 2018-06-01
Webkitgtk\+ CRITICAL 9.8
CVE-2017-1000121

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondar…

Fix: 2.16.3+
Fix from $2,300 2017-11-01
Webkitgtk\+ MEDIUM 5.3
CVE-2017-1000122

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secon…

Fix: 2.16.3+
Fix from $1,600 2017-11-01
Webkitgtk HIGH 7.5
CVE-2015-2330

Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure …

Fix: after 2.6.5
Fix from $1,950 2017-03-10