# Webkitgtk vulnerabilities > Webkitgtk has 127 published vulnerabilities across 4 products in our catalogue. 12 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Webkitgtk+, with 64. If you run Webkitgtk software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/webkitgtk ## At a glance - **Published vulnerabilities:** 127 - **Known to be exploited:** 12 - **Products:** 4 - **Versions:** 826 - **Most recently added to the known-exploited list:** [CVE-2023-42917](https://www.precursorintelligence.com/what-is/cve-2023-42917), 4 December 2023. We keep watching the list. ## Which Webkitgtk products have the most vulnerabilities? - Webkitgtk+: 64 published vulnerabilities, 404 versions - [Webkitgtk](https://www.precursorintelligence.com/product/webkitgtk/webkitgtk): 63 published vulnerabilities, 420 versions - [Webkit2gtk3](https://www.precursorintelligence.com/product/webkitgtk/webkit2gtk3): 1 published vulnerability, 2 versions - Webkitgtk\\+: 0 published vulnerabilities, 0 versions Each product page lists its own known-exploited flaws. ## Which Webkitgtk vulnerabilities are being exploited? 12 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2023-42917](https://www.precursorintelligence.com/what-is/cve-2023-42917): Apple Multiple Products WebKit Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 9.3%, known exploited since 4 December 2023. - [CVE-2023-42916](https://www.precursorintelligence.com/what-is/cve-2023-42916): Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 18%, known exploited since 4 December 2023. - [CVE-2023-41993](https://www.precursorintelligence.com/what-is/cve-2023-41993): Apple Multiple Products WebKit Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 24%, known exploited since 25 September 2023. - [CVE-2023-37450](https://www.precursorintelligence.com/what-is/cve-2023-37450): Apple Multiple Products WebKit Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 19%, known exploited since 13 July 2023. - [CVE-2023-32439](https://www.precursorintelligence.com/what-is/cve-2023-32439): Apple Multiple Products WebKit Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 24%, known exploited since 23 June 2023. - [CVE-2023-32373](https://www.precursorintelligence.com/what-is/cve-2023-32373): Apple Multiple Products WebKit Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 12%, known exploited since 22 May 2023. - [CVE-2023-28204](https://www.precursorintelligence.com/what-is/cve-2023-28204): Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 14%, known exploited since 22 May 2023. - [CVE-2022-2294](https://www.precursorintelligence.com/what-is/cve-2022-2294): WebRTC Heap Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 71%, known exploited since 25 August 2022. - [CVE-2022-32893](https://www.precursorintelligence.com/what-is/cve-2022-32893): Apple iOS and macOS Out-of-Bounds Write Vulnerability. High, CVSS 8.8, chance of use in 30 days 9.9%, known exploited since 18 August 2022. - [CVE-2019-8720](https://www.precursorintelligence.com/what-is/cve-2019-8720): WebKitGTK Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 1.6%, known exploited since 23 May 2022. - [CVE-2021-1789](https://www.precursorintelligence.com/what-is/cve-2021-1789): Apple Multiple Products Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 14%, known exploited since 4 May 2022. - [CVE-2021-1870](https://www.precursorintelligence.com/what-is/cve-2021-1870): Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 7.7%, known exploited since 3 November 2021. ## Which Webkitgtk flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2022-2294](https://www.precursorintelligence.com/what-is/cve-2022-2294): 71%, High (CVSS 8.8), known exploited - [CVE-2018-11646](https://www.precursorintelligence.com/what-is/cve-2018-11646): 68%, High (CVSS 7.5) - [CVE-2010-1807](https://www.precursorintelligence.com/what-is/cve-2010-1807): 61%, Critical (CVSS 9.3) - [CVE-2018-4162](https://www.precursorintelligence.com/what-is/cve-2018-4162): 38%, High (CVSS 8.8) - [CVE-2023-41993](https://www.precursorintelligence.com/what-is/cve-2023-41993): 24%, High (CVSS 8.8), known exploited - [CVE-2019-8375](https://www.precursorintelligence.com/what-is/cve-2019-8375): 16%, Critical (CVSS 9.8) ## All Webkitgtk products we track 3 products with at least one tracked version, most vulnerabilities first: - Webkitgtk+: 64 vulnerabilities, 404 versions - [Webkitgtk](https://www.precursorintelligence.com/product/webkitgtk/webkitgtk): 63 vulnerabilities, 420 versions - [Webkit2gtk3](https://www.precursorintelligence.com/product/webkitgtk/webkit2gtk3): 1 vulnerability, 2 versions ## Questions ### How many vulnerabilities does Webkitgtk have? Our catalogue lists 127 published vulnerabilities across 4 products and 826 versions from Webkitgtk. The most recent Webkitgtk flaw added to the known-exploited list is CVE-2023-42917, on 4 December 2023. ### Which Webkitgtk vulnerabilities are being exploited? 12 Webkitgtk vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2023-42917, CVE-2023-42916 and CVE-2023-41993. The full list is on this page. ### Which Webkitgtk product has the most vulnerabilities? Webkitgtk+, with 64 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Webkitgtk vulnerabilities? Create a Precursor Intelligence account and track the Webkitgtk products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Webkitgtk? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact