webkitgtk vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a use-after-free in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp....

Webkitgtk Webkitgtk

6.5

CVSSv3

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889....

Webkitgtk Webkitgtk

7.5

CVSSv3

Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies....

Webkitgtk Webkitgtk

9.8

CVSSv3

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect...

Webkitgtk Webkitgtk\\+

NA

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors....

Google Chrome Webkitgtk Webkitgtk

NA

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors....

Google Chrome Webkitgtk Webkitgtk

8.8

CVSSv3

WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS...

Webkitgtk Webkitgtk\\+Canonical Ubuntu Linux 16.04

5.3

CVSSv3

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are...

Wpewebkit Wpe Webkit Webkitgtk Webkitgtk

6.5

CVSSv3

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site....

Apple Webkit -Webkitgtk Webkitgtk\\+

3.1

CVSSv3

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document....

Apple Webkit -Webkitgtk Webkitgtk\\+

Get Started

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook