Lucene search
K

16 matches found

AstraLinux
AstraLinux
added 2026/01/13 2:1 p.m.3 views

Astra Linux – Vulnerability in WebKit2GTK

A flaw was discovered in WebKitGTK and WPE WebKit. This vulnerability allows for an out-of-bounds read and integer underflow, resulting in a UIProcess crash DoS through a crafted payload sent to the GLib remote inspector server...

7.5CVSS7.6AI score0.00107EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/12/17 12:19 p.m.3 views

webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

7.5CVSS5.8AI score0.00107EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/12/17 6:13 a.m.3 views

webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

7.5CVSS5.8AI score0.00107EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/12/08 1:59 a.m.2 views

webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

7.5CVSS5.8AI score0.00107EPSS
Exploits0References5
OSV
OSV
added 2025/11/25 8:15 a.m.0 views

UBUNTU-CVE-2025-13502

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

7.5CVSS5.8AI score0.00107EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/11/25 8:2 a.m.1 views

CVE-2025-13502

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

7.5CVSS6.5AI score0.00107EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/25 8:2 a.m.1 views

EUVD-2025-199556

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

7.5CVSS6AI score0.00107EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2019/05/03 12:0 a.m.29 views

openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:1316-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.5AI score0.15983EPSS
Exploits4References2
OSV
OSV
added 2019/04/25 7:50 a.m.6 views

SUSE-SU-2019:1030-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2019-8375: Fixed an issue in UIProcess subsystem which could allow the script dialog size to exceed the web view size leading to Buffer Overflow or other unspecified impact bsc1126768...

9.8CVSS9.6AI score0.15983EPSS
Exploits4References3
CNVD
CNVD
added 2019/02/25 12:0 a.m.2 views

WebKitGTK UIProcess Subsystem Denial of Service Vulnerability

WebKitGTK is KDE, Apple Apple, Google Google and other companies to develop a set of open source Web browser engine . WebKitGTK + is a full-featured port of the WebKit engine , including all the features of WebKit . A denial of service vulnerability exists in the UIProcess subsystem used in...

9.8CVSS8.5AI score0.15983EPSS
Exploits4References1
Prion
Prion
added 2019/02/24 1:29 p.m.18 views

Buffer overflow

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

7.5CVSS9.6AI score0.15983EPSS
Exploits4References8Affected Software4
OSV
OSV
added 2019/02/24 1:29 p.m.1 views

DEBIAN-CVE-2019-8375

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

9.8CVSS9.1AI score0.15983EPSS
Exploits4References1
Debian CVE
Debian CVE
added 2019/02/24 1:0 p.m.25 views

CVE-2019-8375

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

9.8CVSS9.8AI score0.15983EPSS
Exploits4
UbuntuCve
UbuntuCve
added 2019/02/24 12:0 a.m.30 views

CVE-2019-8375

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

9.8CVSS7AI score0.15983EPSS
Exploits4References4
NVD
NVD
added 2018/06/01 1:29 p.m.13 views

CVE-2018-11646

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash...

7.5CVSS7.4AI score0.75346EPSS
Exploits10References5
Debian CVE
Debian CVE
added 2018/06/01 1:0 p.m.29 views

CVE-2018-11646

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash...

7.5CVSS8.1AI score0.75346EPSS
Exploits10
Rows per page
Query Builder