WebKitGTK güvenlik açıkları (CVE)

WebKitGTK için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

21 sonuç
8.8Yüksek
CVE-2026-78376

Webkitgtk: use-after-free of jscvalue function parameters

WebKit WebKit; WebKitGTK WebKitGTK; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.

9.8Kritik
CVE-2025-43343
Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple tvOS

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

9.8Kritik
CVE-2025-43342
Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected pr…

8.8Yüksek
CVE-2025-31277 KEV

Apple Multiple Products Buffer Overflow Vulnerability

Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple tvOS

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

1.7%EPSS
8.1Yüksek
CVE-2024-23263
Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent …

1.5%EPSS
8.1Yüksek
CVE-2024-23246
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple visionOS

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to break out of its sandbox.

8.8Yüksek
CVE-2023-42917 KEV

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple Safari; Apple macOS; Apple iOS and iPadOS

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this i…

9.3%EPSS
6.5Orta
CVE-2023-42916 KEV

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple Safari; Apple macOS; Apple iOS and iPadOS; apple iphone_os

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue …

18%EPSS
8.8Yüksek
CVE-2023-41993 KEV

Apple Multiple Products WebKit Code Execution Vulnerability

Apple macOS; apple iphone_os; apple ipad_os; apple macos

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

24%EPSS
8.8Yüksek
CVE-2023-37450 KEV

Apple Multiple Products WebKit Code Execution Vulnerability

Apple Safari; Apple tvOS; Apple iOS and iPadOS; Apple macOS

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue m…

19%EPSS
8.8Yüksek
CVE-2023-32439 KEV

Apple Multiple Products WebKit Type Confusion Vulnerability

Apple iOS and iPadOS; Apple Safari; Apple macOS

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution.…

24%EPSS
8.8Yüksek
CVE-2023-32373 KEV

Apple Multiple Products WebKit Use-After-Free Vulnerability

Apple macOS; Apple Safari; Apple watchOS; Apple iOS and iPadOS

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead t…

12%EPSS
6.5Orta
CVE-2023-28204 KEV

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple macOS; Apple Safari; Apple watchOS; Apple iOS and iPadOS

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive informati…

14%EPSS
8.8Yüksek
CVE-2019-8720 KEV

WebKitGTK Memory Corruption Vulnerability

webkitgtk

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

1.6%EPSS
8.8Yüksek
CVE-2022-32893 KEV

Apple iOS and macOS Out-of-Bounds Write Vulnerability

Apple Safari; Apple iOS and iPadOS; Apple macOS

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is awar…

10%EPSS
8.8Yüksek
CVE-2022-2294 KEV Fidye yazılımında kullanılıyor

WebRTC Heap Buffer Overflow Vulnerability

Google Chrome

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

71%EPSS
8.8Yüksek
CVE-2021-30952 KEV

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Apple watchOS; Apple iOS and iPadOS; Apple macOS

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

7.0%EPSS
9.8Kritik
CVE-2021-1870 KEV

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Apple iOS and iPadOS; Apple macOS

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. A…

7.7%EPSS
8.8Yüksek
CVE-2021-1789 KEV

Apple Multiple Products Type Confusion Vulnerability

Apple iOS and iPadOS; Apple macOS

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing malic…

14%EPSS