[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU19fAECSU8kgp6NMIW69BfnGvhlvm2ppPnuhZCnsi8Q":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":101,"topProductsByCves":169,"seoMetadata":174,"meta":183},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":39},34569,"webkitgtk",4,127,12,826,"2024-05-14","w",[16,23,28,35],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},170576,"webkitgtk\\+",404,64,7,"2023-11-30",{"id":24,"product_name":8,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":13},170575,420,63,5,{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":33,"last_cve_update":34},170574,"webkit2gtk3",2,1,0,"2023-05-17",{"id":36,"product_name":37,"version_count":33,"cve_count":33,"kev_count":33,"last_cve_update":38},170577,"webkitgtk\\\\+",null,"Webkitgtk is a technology vendor with 4 tracked products and 127 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[41,49,57,65,70,75,80,85,91,97],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":48},"CVE-2022-2294","Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-28",8.8,"v3.1","High",0.70833,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":47,"isKev":55,"epssScore":56},"CVE-2018-11646","webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess\u002FAPI\u002Fglib\u002FWebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.","2018-06-01",7.5,"v3.0",false,0.68018,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":55,"epssScore":64},"CVE-2010-1807","WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.","2010-09-10",9.3,"v2","Critical",0.61319,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":45,"cvssVersion":54,"severity":47,"isKev":55,"epssScore":69},"CVE-2018-4162","An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.","2018-04-03",0.37844,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":74},"CVE-2023-41993","The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.","2023-09-21",0.24349,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":79},"CVE-2023-32439","A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2023-06-23",0.23968,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":84},"CVE-2023-37450","The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2023-07-27",0.1895,{"cveId":86,"description":87,"publishedDate":22,"cvssScore":88,"cvssVersion":46,"severity":89,"isKev":4,"epssScore":90},"CVE-2023-42916","An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.",6.5,"Medium",0.17823,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":54,"severity":63,"isKev":55,"epssScore":96},"CVE-2019-8375","The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess\u002FAPI\u002Fgtk\u002FWebKitScriptDialogGtk.cpp, UIProcess\u002FAPI\u002Fgtk\u002FWebKitScriptDialogImpl.cpp, and UIProcess\u002FAPI\u002Fgtk\u002FWebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).","2019-02-24",9.8,0.15697,{"cveId":98,"description":99,"publishedDate":78,"cvssScore":88,"cvssVersion":46,"severity":89,"isKev":4,"epssScore":100},"CVE-2023-28204","An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.",0.14292,[102,110,113,118,121,125,132,134,138,146,154,162],{"cveId":103,"description":104,"publishedDate":22,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":105,"cisaVulnName":106,"cisaDateAdded":107,"cisaShortDescription":108,"cisaRequiredAction":109},"CVE-2023-42917","A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.",0.09295,"Apple Multiple Products WebKit Memory Corruption Vulnerability","2023-12-04","Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":86,"description":87,"publishedDate":22,"cvssScore":88,"cvssVersion":46,"severity":89,"isKev":4,"epssScore":90,"cisaVulnName":111,"cisaDateAdded":107,"cisaShortDescription":112,"cisaRequiredAction":109},"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":71,"description":72,"publishedDate":73,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":74,"cisaVulnName":114,"cisaDateAdded":115,"cisaShortDescription":116,"cisaRequiredAction":117},"Apple Multiple Products WebKit Code Execution Vulnerability","2023-09-25","Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":81,"description":82,"publishedDate":83,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":84,"cisaVulnName":114,"cisaDateAdded":119,"cisaShortDescription":116,"cisaRequiredAction":120},"2023-07-13","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":76,"description":77,"publishedDate":78,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":79,"cisaVulnName":122,"cisaDateAdded":78,"cisaShortDescription":123,"cisaRequiredAction":124},"Apple Multiple Products WebKit Type Confusion Vulnerability","Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply updates per vendor instructions.",{"cveId":126,"description":127,"publishedDate":78,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":128,"cisaVulnName":129,"cisaDateAdded":130,"cisaShortDescription":131,"cisaRequiredAction":124},"CVE-2023-32373","A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.12172,"Apple Multiple Products WebKit Use-After-Free Vulnerability","2023-05-22","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":98,"description":99,"publishedDate":78,"cvssScore":88,"cvssVersion":46,"severity":89,"isKev":4,"epssScore":100,"cisaVulnName":111,"cisaDateAdded":130,"cisaShortDescription":133,"cisaRequiredAction":124},"Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":48,"cisaVulnName":135,"cisaDateAdded":136,"cisaShortDescription":137,"cisaRequiredAction":124},"WebRTC Heap Buffer Overflow Vulnerability","2022-08-25","WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.",{"cveId":139,"description":140,"publishedDate":141,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":142,"cisaVulnName":143,"cisaDateAdded":144,"cisaShortDescription":145,"cisaRequiredAction":124},"CVE-2022-32893","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2022-08-24",0.09931,"Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.",{"cveId":147,"description":148,"publishedDate":149,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":150,"cisaVulnName":151,"cisaDateAdded":152,"cisaShortDescription":153,"cisaRequiredAction":124},"CVE-2019-8720","A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.","2023-03-06",0.01556,"WebKitGTK Memory Corruption Vulnerability","2022-05-23","WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.",{"cveId":155,"description":156,"publishedDate":157,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":158,"cisaVulnName":159,"cisaDateAdded":160,"cisaShortDescription":161,"cisaRequiredAction":124},"CVE-2021-1789","A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-04-02",0.13975,"Apple Multiple Products Type Confusion Vulnerability","2022-05-04","A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.",{"cveId":163,"description":164,"publishedDate":157,"cvssScore":95,"cvssVersion":46,"severity":63,"isKev":4,"epssScore":165,"cisaVulnName":166,"cisaDateAdded":167,"cisaShortDescription":168,"cisaRequiredAction":124},"CVE-2021-1870","A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.0771,"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","2021-11-03","Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",[170,171,172,173],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":24,"product_name":8,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":13},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":33,"last_cve_update":34},{"id":36,"product_name":37,"version_count":33,"cve_count":33,"kev_count":33,"last_cve_update":38},{"title":175,"metaDescription":176,"keywords":177,"structuredData":178},"Webkitgtk - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Webkitgtk covering 4 products with 127 tracked vulnerabilities including 1 critical and 9 high-severity issues and 12 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Webkitgtk vulnerabilities, Webkitgtk security, Webkitgtk CVE, Webkitgtk threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Webkitgtk KEV, Webkitgtk exploited vulnerabilities",{"@context":179,"@type":180,"name":181,"description":176,"url":182},"https:\u002F\u002Fschema.org","Organization","Webkitgtk","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fwebkitgtk",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":184,"apiVersion":185},"2026-10-17T15:56:17.334Z","3.0"]