İçeriğe atla
Noroxi

wpewebkit kayıtları

wpewebkit üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
6 · %25
Silahlaştırılmış
6 · %25
Pre-auth RCE
5
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
18 gün

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2022-2294
    86Hemen

    Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %70

    google · chrome27 Tem 2022

  • CVE-2022-32893
    68Bu hafta

    An out-of-bounds write issue was addressed with improved bounds checking.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %10

    apple · safari24 Ağu 2022

  • CVE-2025-6558
    68Bu hafta

    Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentiall

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %10

    google · chrome15 Tem 2025

  • CVE-2025-31277
    65Bu hafta

    The issue was addressed with improved memory handling.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %2

    apple · safari29 Tem 2025

  • CVE-2019-8720
    65Bu hafta

    A vulnerability was found in WebKit.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %2

    webkitgtk · webkitgtk6 Mar 2023

  • CVE-2021-30952
    63Bu hafta

    An integer overflow was addressed with improved input validation.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %7

    apple · safari24 Ağu 2021

  • CVE-2020-13753
    41Planlayın

    The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl.

    KritikCVSS 10,0İstismar yokEPSS %3

    webkitgtk · webkitgtk14 Tem 2020

  • CVE-2020-10018
    40Planlayın

    WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-

    KritikCVSS 9,8İstismar yokEPSS %5

    webkitgtk · webkitgtk2 Mar 2020

  • CVE-2023-40397
    40Planlayın

    The issue was addressed with improved checks.

    KritikCVSS 9,8İstismar yokEPSS %2

    apple · macos6 Eyl 2023

  • CVE-2025-43343
    39İzleyin

    The issue was addressed with improved memory handling.

    KritikCVSS 9,8İstismar yokEPSS %1

    apple · safari15 Eyl 2025

  • CVE-2025-43342
    39İzleyin

    A correctness issue was addressed with improved checks.

    KritikCVSS 9,8İstismar yokEPSS %1

    apple · safari15 Eyl 2025

  • CVE-2018-12293
    38İzleyin

    The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKit

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    canonical · ubuntu linux19 Haz 2018

  • CVE-2020-11793
    36İzleyin

    A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers t

    YüksekCVSS 8,8İstismar yokEPSS %3

    webkitgtk · webkitgtk17 Nis 2020

  • CVE-2023-28198
    35İzleyin

    A use-after-free issue was addressed with improved memory management.

    YüksekCVSS 8,8İstismar yokEPSS %1

    apple · ipados14 Ağu 2023

  • CVE-2019-6251
    33İzleyin

    WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections.

    YüksekCVSS 8,1İstismar yokEPSS %4

    webkitgtk · webkitgtk14 Oca 2019

  • CVE-2024-23263
    26İzleyin

    A logic issue was addressed with improved validation.

    OrtaCVSS 6,5İstismar yokEPSS %1

    apple · safari7 Mar 2024

  • CVE-2024-23284
    26İzleyin

    A logic issue was addressed with improved state management.

    OrtaCVSS 6,5İstismar yokEPSS %1

    apple · safari7 Mar 2024

  • CVE-2024-23280
    26İzleyin

    An injection issue was addressed with improved validation.

    OrtaCVSS 6,5İstismar yokEPSS %1

    apple · safari7 Mar 2024

  • CVE-2024-23254
    26İzleyin

    The issue was addressed with improved UI handling.

    OrtaCVSS 6,5İstismar yokEPSS %1

    apple · safari7 Mar 2024

  • CVE-2019-11070
    22İzleyin

    WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (

    OrtaCVSS 5,3İstismar yokEPSS %3

    webkitgtk · webkitgtk10 Nis 2019

  • CVE-2024-27834
    22İzleyin

    The issue was addressed with improved checks.

    OrtaCVSS 5,5İstismar yokEPSS %1

    apple · safari14 May 2024

  • CVE-2023-32370
    21İzleyin

    A logic issue was addressed with improved validation.

    OrtaCVSS 5,3İstismar yokEPSS %1

    apple · macos5 Eyl 2023

  • CVE-2021-42762
    21İzleyin

    BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick ho

    OrtaCVSS 5,3İstismar yokEPSS %1

    webkitgtk · webkitgtk20 Eki 2021

  • CVE-2023-42843
    17İzleyin

    An inconsistent user interface issue was addressed with improved state management.

    OrtaCVSS 4,3İstismar yokEPSS %1

    apple · safari21 Şub 2024