Vulnerabilities > Webkitgtk > High

DATE CVE VULNERABILITY TITLE RISK
2021-07-07 CVE-2021-21775 Use After Free vulnerability in multiple products
A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4.
network
low complexity
webkitgtk fedoraproject debian CWE-416
8.0
2021-04-02 CVE-2021-1789 Type Confusion vulnerability in multiple products
A type confusion issue was addressed with improved state handling.
network
low complexity
apple fedoraproject webkitgtk CWE-843
8.8
2021-03-03 CVE-2020-13558 Use After Free vulnerability in Webkitgtk 2.30.1
A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1.
network
low complexity
webkitgtk CWE-416
8.8
2020-12-08 CVE-2020-27918 Use After Free vulnerability in multiple products
A use after free issue was addressed with improved memory management.
local
low complexity
apple fedoraproject debian webkitgtk CWE-416
7.8
2020-12-03 CVE-2020-13584 Use After Free vulnerability in multiple products
An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64.
network
low complexity
webkitgtk fedoraproject CWE-416
8.8
2020-12-03 CVE-2020-13543 Use After Free vulnerability in Webkitgtk 2.30.0
A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0.
network
low complexity
webkitgtk CWE-416
8.8
2020-04-17 CVE-2020-11793 Use After Free vulnerability in multiple products
A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).
8.8
2020-01-22 CVE-2016-4761 Use After Free vulnerability in multiple products
WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS
network
low complexity
webkitgtk canonical CWE-416
8.8
2019-03-05 CVE-2019-6234 Out-of-bounds Write vulnerability in multiple products
A memory corruption issue was addressed with improved memory handling.
network
low complexity
apple webkitgtk CWE-787
8.8
2019-01-14 CVE-2019-6251 WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. 8.1