Skip to content
Noroxi

WebKitGTK records

132 published records for vendor webkitgtk.

Researcher profile

Entered KEV
15 · 11.4%
Weaponized
17 · 12.9%
Pre-auth RCE
51
With a fix record
86.4%
Median publish → KEV
4 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

132 records
  • CVE-2022-2294
    86Now

    Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via

    HighCVSS 8.8KEVWeaponizedEPSS 70%

    google · chromeJul 27, 2022

  • CVE-2023-41993
    72This week

    The issue was addressed with improved checks.

    HighCVSS 8.8KEVWeaponizedEPSS 24%

    apple · ipadosSep 21, 2023

  • CVE-2023-32439
    72This week

    A type confusion issue was addressed with improved checks.

    HighCVSS 8.8KEVWeaponizedEPSS 24%

    apple · safariJun 23, 2023

  • CVE-2023-37450
    71This week

    The issue was addressed with improved checks.

    HighCVSS 8.8KEVWeaponizedEPSS 19%

    apple · safariJul 26, 2023

  • CVE-2021-1870
    71This week

    A logic issue was addressed with improved restrictions.

    CriticalCVSS 9.8KEVWeaponizedEPSS 8%

    apple · ipadosApr 2, 2021

  • CVE-2021-1789
    69This week

    A type confusion issue was addressed with improved state handling.

    HighCVSS 8.8KEVWeaponizedEPSS 14%

    apple · ipadosApr 2, 2021

  • CVE-2023-32373
    69This week

    A use-after-free issue was addressed with improved memory management.

    HighCVSS 8.8KEVWeaponizedEPSS 12%

    apple · safariJun 23, 2023

  • CVE-2022-32893
    68This week

    An out-of-bounds write issue was addressed with improved bounds checking.

    HighCVSS 8.8KEVWeaponizedEPSS 10%

    apple · safariAug 24, 2022

  • CVE-2025-6558
    68This week

    Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentiall

    HighCVSS 8.8KEVWeaponizedEPSS 9%

    google · chromeJul 15, 2025

  • CVE-2023-42917
    68This week

    A memory corruption vulnerability was addressed with improved locking.

    HighCVSS 8.8KEVWeaponizedEPSS 9%

    apple · safariNov 30, 2023

  • CVE-2025-31277
    65This week

    The issue was addressed with improved memory handling.

    HighCVSS 8.8KEVWeaponizedEPSS 2%

    apple · safariJul 29, 2025

  • CVE-2019-8720
    65This week

    A vulnerability was found in WebKit.

    HighCVSS 8.8KEVWeaponizedEPSS 2%

    webkitgtk · webkitgtkMar 6, 2023

  • CVE-2021-30952
    63This week

    An integer overflow was addressed with improved input validation.

    HighCVSS 7.8KEVWeaponizedEPSS 7%

    apple · safariAug 24, 2021

  • CVE-2023-42916
    61This week

    An out-of-bounds read was addressed with improved input validation.

    MediumCVSS 6.5KEVWeaponizedEPSS 18%

    apple · safariNov 30, 2023

  • CVE-2023-28204
    60This week

    An out-of-bounds read was addressed with improved input validation.

    MediumCVSS 6.5KEVWeaponizedEPSS 14%

    apple · safariJun 23, 2023

  • CVE-2010-1807
    55Plan

    WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate flo

    CriticalCVSS 9.3Proof of conceptEPSS 61%

    apple · safariSep 10, 2010

  • CVE-2018-11646
    50Plan

    webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebK

    HighCVSS 7.5WeaponizedEPSS 68%

    webkitgtk · webkitgtk\+Jun 1, 2018

  • CVE-2018-4162
    46Plan

    An issue was discovered in certain Apple products.

    HighCVSS 8.8WeaponizedEPSS 38%

    apple · safariApr 3, 2018

  • CVE-2019-8375
    44Plan

    The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent t

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    webkitgtk · webkitgtkFeb 24, 2019

  • CVE-2010-3116
    41Plan

    Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375

    CriticalCVSS 10.0No exploitEPSS 4%

    google · chromeAug 24, 2010

  • CVE-2020-13753
    41Plan

    The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl.

    CriticalCVSS 10.0No exploitEPSS 3%

    webkitgtk · webkitgtkJul 14, 2020

  • CVE-2010-3113
    41Plan

    Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause

    CriticalCVSS 10.0No exploitEPSS 3%

    google · chromeAug 24, 2010

  • CVE-2010-3114
    41Plan

    The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performin

    CriticalCVSS 10.0No exploitEPSS 2%

    google · chromeAug 24, 2010

  • CVE-2020-10018
    40Plan

    WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-

    CriticalCVSS 9.8No exploitEPSS 5%

    webkitgtk · webkitgtkMar 2, 2020

  • CVE-2010-4197
    40Plan

    Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remot

    CriticalCVSS 9.8No exploitEPSS 2%

    google · chromeNov 5, 2010