Vulnerabilities > Webkitgtk > High

DATE CVE VULNERABILITY TITLE RISK
2018-04-03 CVE-2018-4101 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple canonical webkitgtk CWE-119
8.8
2017-03-10 CVE-2015-2330 Improper Certificate Validation vulnerability in Webkitgtk
Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies.
network
low complexity
webkitgtk CWE-295
7.5
2017-02-20 CVE-2017-2373 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple webkitgtk CWE-119
8.8
2017-02-20 CVE-2017-2369 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple webkitgtk CWE-119
8.8
2017-02-20 CVE-2017-2360 Use After Free vulnerability in multiple products
An issue was discovered in certain Apple products.
local
low complexity
apple webkitgtk CWE-416
7.8
2017-02-20 CVE-2017-2356 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple webkitgtk CWE-119
8.8
2017-02-20 CVE-2017-2355 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple webkitgtk CWE-119
8.8
2017-02-20 CVE-2017-2354 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple webkitgtk CWE-119
8.8
2016-05-20 CVE-2016-1859 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
network
low complexity
apple webkitgtk CWE-119
8.8
2016-05-20 CVE-2016-1857 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856.
network
low complexity
apple webkitgtk CWE-119
8.8