Browse CVEs

HIGH 8.8 CVE-2023-25361 A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely. Webkitgtk 2.36.8+ Fix from $1,9502023-03-02 HIGH 8.8 CVE-2023-25362 A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotel… Webkitgtk 2.36.8+ Fix from $1,9502023-03-02 HIGH 8.8 CVE-2023-25363 A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code re… Webkitgtk 2.36.8+ Fix from $1,9502023-03-02 HIGH 8.8 CVE-2023-25360 A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely. Webkitgtk 2.36.8+ Fix from $1,9502023-03-02 MEDIUM 6.5 CVE-2021-45481 In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation v… Webkitgtk 2.32.4+ Fix from $1,6002021-12-25 MEDIUM 6.5 CVE-2021-45482 In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889. Webkitgtk 2.32.4+ Fix from $1,6002021-12-25 MEDIUM 6.5 CVE-2021-45483 In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889. Webkitgtk 2.32.4+ Fix from $1,6002021-12-25 HIGH 8.8 CVE-2021-21806 An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can cause a use-after-f… Webkitgtk No fix yet Fix from $1,9502021-07-08 HIGH 8.8 CVE-2020-13558 A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can … Webkitgtk No fix yet Fix from $1,9502021-03-03 HIGH 8.8 CVE-2020-13543 A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after… Webkitgtk No fix yet Fix from $1,9502020-12-03 MEDIUM 5.3 CVE-2013-7324 Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via … Webkitgtk after 2.26.4 Fix from $1,6002020-02-17 MEDIUM 5.3 CVE-2019-11070 WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH… Webkitgtk 2.24.1+ Fix from $1,6002019-04-10 HIGH 7.5 CVE-2018-11712 WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20… Webkitgtk\+ Patch available Fix from $1,9502018-06-04 MEDIUM 6.5 CVE-2018-11713 WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 … Webkitgtk\+ 2.20.0 / 2.62.0+ Fix from $1,6002018-06-04 HIGH 7.5 CVE-2018-11646EPSS 68% webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as us… Webkitgtk\+ after 2.21.3 Fix from $1,9502018-06-01 CRITICAL 9.8 CVE-2017-1000121 The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondar… Webkitgtk\+ 2.16.3+ Fix from $2,3002017-11-01 MEDIUM 5.3 CVE-2017-1000122 The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secon… Webkitgtk\+ 2.16.3+ Fix from $1,6002017-11-01 HIGH 7.5 CVE-2015-2330 Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure … Webkitgtk after 2.6.5 Fix from $1,9502017-03-10