Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
By Recent Activity
webkitgtk webkitgtk vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2018-11712
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections....
Webkitgtk Webkitgtk\\+ 2.20.1
Webkitgtk Webkitgtk\\+ 2.20.0
6.5
CVSSv3
CVE-2021-45482
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889....
Webkitgtk Webkitgtk
9.8
CVSSv3
CVE-2017-1000121
The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect...
Webkitgtk Webkitgtk\\+
7.5
CVSSv3
CVE-2015-2330
Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies....
Webkitgtk Webkitgtk
5.3
CVSSv3
CVE-2017-1000122
The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products....
Webkitgtk Webkitgtk\\+
5.3
CVSSv3
CVE-2013-7324
Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop...
Webkitgtk Webkitgtk
7.5
CVSSv3
CVE-2018-11646
webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash....
Webkitgtk Webkitgtk\\+
2 EDB exploits available
1 Metasploit module available
6.5
CVSSv3
CVE-2021-45483
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889....
Webkitgtk Webkitgtk
8.8
CVSSv3
CVE-2020-13558
A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free....
Webkitgtk Webkitgtk 2.30.1
1 Github repository available
6.5
CVSSv3
CVE-2016-4592
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site....
Apple Webkit -
Webkitgtk Webkitgtk\\+
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48285
CVE-2023-23621
bypass
CVE-2019-25053
file inclusion
CVE-2023-24055
logic flaw
CVE-2023-23560
CVE-2022-48012
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »