Sign inStart freeBook a demo

Webkitgtk vulnerabilities12 known to be exploited.

Vendor12 known exploited
The short answer

Webkitgtk has 127 published vulnerabilities across 4 products in our catalogue. 12 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Webkitgtk+, with 64. If you run Webkitgtk software, patch the exploited flaws first.

See the exploited flaws

The most recent Webkitgtk flaw added to the known-exploited list is CVE-2023-42917, on 4 December 2023. We keep watching the known-exploited list.

Products

Which Webkitgtk products have the most vulnerabilities?

Webkitgtk+ leads with 64 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Webkitgtk+64
  2. Webkitgtk63
  3. Webkit2gtk31
  4. Webkitgtk\+0
Published vulnerabilities
Known exploited

Which Webkitgtk vulnerabilities are being exploited?

12 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 8.8
    CVE-2023-42917HighKnown exploited
    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content.

    Chance of use9.3%Known exploited since4 Dec 2023
  2. 6.5
    CVE-2023-42916MediumKnown exploited
    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content.

    Chance of use18%Known exploited since4 Dec 2023
  3. 8.8
    CVE-2023-41993HighKnown exploited
    Apple Multiple Products WebKit Code Execution Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content.

    Chance of use24%Known exploited since25 Sep 2023
  4. 8.8
    CVE-2023-37450HighKnown exploited
    Apple Multiple Products WebKit Code Execution Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content.

    Chance of use19%Known exploited since13 Jul 2023
  5. 8.8
    CVE-2023-32439HighKnown exploited
    Apple Multiple Products WebKit Type Confusion Vulnerability

    Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content.

    Chance of use24%Known exploited since23 Jun 2023
  6. 8.8
    CVE-2023-32373HighKnown exploited
    Apple Multiple Products WebKit Use-After-Free Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content.

    Chance of use12%Known exploited since22 May 2023
  7. 6.5
    CVE-2023-28204MediumKnown exploited
    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content.

    Chance of use14%Known exploited since22 May 2023
  8. 8.8
    CVE-2022-2294HighKnown exploited
    WebRTC Heap Buffer Overflow Vulnerability

    WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution.

    Chance of use71%Known exploited since25 Aug 2022
Exploit likelihood

Which Webkitgtk flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 71%
    CVE-2022-2294HighKnown exploited

    Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    CVSS8.8Published28 Jul 2022
  2. 68%
    CVE-2018-11646High

    webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL,...

    CVSS7.5Published1 Jun 2018
  3. 61%
    CVE-2010-1807Critical

    WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or...

    CVSS9.3Published10 Sep 2010
  4. 38%
    CVE-2018-4162High

    An issue was discovered in certain Apple products.

    CVSS8.8Published3 Apr 2018
  5. 24%
    CVE-2023-41993HighKnown exploited

    The issue was addressed with improved checks.

    CVSS8.8Published21 Sep 2023
  6. 16%
    CVE-2019-8375Critical

    The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote...

    CVSS9.8Published24 Feb 2019
Every product

All Webkitgtk products we track.

3 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 3 Webkitgtk products with at least one tracked version, of 4 in our catalogue.

Precursor Intelligence

Running Webkitgtk? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 127 published vulnerabilities across 4 products and 826 versions from Webkitgtk. The most recent Webkitgtk flaw added to the known-exploited list is CVE-2023-42917, on 4 December 2023.

12 Webkitgtk vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2023-42917, CVE-2023-42916 and CVE-2023-41993. The full list is on this page.

Webkitgtk+, with 64 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Webkitgtk products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring