Lucene search
+L

561 matches found

RedHat Linux
RedHat Linux
•added 2025/12/22 1:45 a.m.•15 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash...

6.5CVSS6.8AI score0.00507EPSS
SaveExploits0References5
Rockylinux
Rockylinux
•added 2025/12/19 9:05 a.m.•19 views

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

8.8CVSS6.5AI score0.3414EPSS
SaveExploits8
OSV
OSV
•added 2025/12/17 9:16 p.m.•11 views

CVE-2025-43536

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3. Processing maliciously crafted web content may lead to an unexpected process crash...

4.3CVSS5.8AI score
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/12/17 11:01 a.m.•10 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.3. Security issues fixed: CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds read and an integer underflow bsc1254208...

8.8CVSS7.4AI score0.04042EPSS
SaveExploits1References72
RedhatCVE
RedhatCVE
•added 2025/12/16 12:25 a.m.•16 views

CVE-2025-66844

In grav 1.7.49.5, a SSRF Server-Side Request Forgery vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows undefined PHP functions to be registered...

9.1CVSS6.9AI score0.00288EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•18 views

PT-2025-51250

In grav 1.7.49.5, a SSRF Server-Side Request Forgery vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows undefined PHP functions to be registered...

6.9AI score0.00288EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/04 12:00 a.m.•12 views

PT-2025-49101

Name of the Vulnerable Software and Affected Versions WebKitGTK affected versions not specified Description A flaw exists in WebKitGTK where processing malicious web content can lead to an unexpected process crash due to improper memory handling. Recommendations At the moment, there is no...

10CVSS6.7AI score0.0145EPSS
SaveExploits0References165
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•2 views

CVE-2025-55179: Undefined Security Weakness

Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen...

5.4CVSS5.9AI score0.0017EPSS
SaveExploits0References1
AlmaLinux
AlmaLinux
•added 2025/11/11 12:00 a.m.•14 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43272 webkitgtk: Processing maliciously crafted web content may lead to an unexpected proces...

9.8CVSS6.7AI score0.01029EPSS
SaveExploits0References12
NVD
NVD
•added 2025/11/04 2:15 a.m.•14 views

CVE-2025-43434

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash...

4.3CVSS0.01284EPSS
SaveExploits0References6
OSV
OSV
•added 2025/11/04 2:15 a.m.•8 views

DEBIAN-CVE-2025-43438

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash...

4.3CVSS6.4AI score0.01112EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/04 2:15 a.m.•12 views

CVE-2025-43432

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

4.3CVSS5.8AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2025/11/04 1:15 a.m.•41 views

CVE-2025-43433

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption...

0.01169EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•19 views

PT-2025-44863

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 Safari versions prior to 26.1 visionOS versions prior to 26.1 Description A flaw exists due to improper state management. Processing specially designed web...

5CVSS6.7AI score0.00706EPSS
SaveExploits0References152
VulnCheck KEV
VulnCheck KEV
•added 2025/10/20 12:00 a.m.•13 views

VulnCheck KEV: CVE-2022-48503

Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...

8.8CVSS8.5AI score0.03213EPSS
SaveIn wildExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/10/13 12:00 a.m.•7 views

RHEL 9 : webkit2gtk3 (RHSA-2025:17743)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17743 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously...

9.8CVSS6.7AI score0.01029EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-18212

Malware in sbrugna...

8.8CVSS6.7AI score0.02067EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2019-18201

Malware in sbrugna...

8.8CVSS6.7AI score0.01997EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-18124

Malware in sbrugna...

8.8CVSS7.7AI score0.01417EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-22117

Malware in sbrugna...

5.4CVSS5.3AI score0.01159EPSS
SaveExploits0References6
Rows per page
Query Builder