CVE-2020-27918

CVE-2020-27918 is a use-after-free vulnerability in WebKitGTK/WebKit where processing maliciously crafted web content may lead to arbitrary code execution. The issue is documented across multiple advisories and is fixed upstream in WebKitGTK/WebKit version 2.30.6 (and corresponding package update...

CVE-2023-32373

CVE-2023-32373 is a use-after-free in WebKitGTK/WebKit related to processing malicious web content. Connected advisories confirm this vulnerability affects WebKitGTK/WebKit components and note exploitation activity. The issue is fixed in WebKitGTK/WebKit updates (e.g., webkitgtk4 packages) across...

CVE-2023-28204

CVE-2023-28204 is an out-of-bounds read in WebKit caused by improper input handling while processing web content. It affects WebKit-based components and was fixed in multiple vendor advisories: Apple updates (watchOS/macOS/iOS/iPadOS/Safari) and WebKitGTK/WPE WebKit packages (e.g., webkitgtk4 2.3...

CVE-2023-37450

CVE-2023-37450 is a WebKit/WebKitGTK-related vulnerability where processing web content may lead to arbitrary code execution. Apple’s documentation states the issue was addressed with improved checks and memory handling, with fixes in iOS 16.6 / iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventur...

CVE-2023-32439

CVE-2023-32439 is a type confusion vulnerability in Apple’s WebKit used by iOS, iPadOS, macOS and Safari. The issue allows arbitrary code execution when processing malicious web content and is fixed in iOS 16.5.1/iPadOS 16.5.1, iOS 15.7.7/iPadOS 15.7.7, macOS Ventura 13.4.1, and Safari 16.5.1. Ea...

CVE-2023-41993

CVE-2023-41993 is a WebKit code‑execution vulnerability affecting Apple platforms where processing web content could trigger arbitrary code execution. The public record notes the issue was fixed in macOS Sonoma 14 and is associated with Safari/WebKit processing paths. Apple documents indicate the...

CVE-2023-42917

CVE-2023-42917 is a memory corruption vulnerability in Apple WebKit that may allow arbitrary code execution when processing web content. It is fixed in iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2. The CVE entry notes that exploitation may have occurred on iOS versions before...

CVE-2023-42916

Technical details about CVE-2023-42916 are not provided in the connected documents. Please monitor for updates from official advisories.

CVE-2019-8764

CVE-2019-8764 is a logic-issue vulnerability reported in WebKit that manifests as universal cross-site scripting when processing malicious web content. The associated connected documentation shows this CVE linked to watchOS 6.1, where the fix is described as an improvement in state management, ad...

CVE-2019-8625

CVE-2019-8625 is a logic issue in WebKitGTK/WebKit related to state management. It is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, and iCloud for Windows 7.14, and is associated with universal cross-site scripting when processing crafted web content. Connected advisories...

CVE-2019-8813

CVE-2019-8813 is a WebKit/WebKit-derived issue classified as a logic vulnerability in state management that can enable universal cross-site scripting when processing malicious web content. The publicly documented fixes indicate the vulnerability is addressed in iOS 13.2, iPadOS 13.2, tvOS 13.2, a...

CVE-2019-8719

CVE-2019-8719 is a logic issue related to improved state management that could enable a universal cross-site scripting (XSS) scenario when processing malicious web content. The entry notes a fixed state in updated products: tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, and iCloud ...

CVE-2018-4162

CVE-2018-4162 affects Apple WebKit in multiple OS components (iOS before 11.3, Safari before 11.1, iCloud/iTunes on Windows, tvOS before 11.3, watchOS before 4.3). The issue enables remote code execution or memory-corruption–driven crashes via a crafted website, with WebKit memory-corruption as t...

CVE-2022-42826

CVE-2022-42826 is a use-after-free vulnerability in WebKitGTK/WebKitGTK2/WebKitGTK-based WebKit, caused by improper memory management that could allow arbitrary code execution when processing malicious web content. The CVE entry is supported by multiple connected reports: Apple advisories state t...

CVE-2018-11713

CVE-2018-11713 concerns WebKitGTK's WebKit Libsoup network backend. WebCore/SocketStreamHandleImplSoup.cpp could fail to use system proxy settings for WebSocket connections in WebKitGTK+ builds prior to 2.20.0 or when libsoup 2.62.0 is not present. This could allow a crafted web page to deanonymi...

CVE-2019-8375

CVE-2019-8375 affects WebKit’s UIProcess subsystem used by WebKitGTK/WebKitGTK+. The vulnerability arises when the script dialog size can exceed the web view size, potentially enabling remote denial of service via a buffer overflow, with other unspecified impacts. Affected packages include WebKit...

CVE-2018-4208

CVE-2018-4208 describes an assertion failure caused by an unexpected interaction in WebKit components across Apple platforms (iOS, Safari, iCloud for Windows, tvOS, watchOS, iTunes for Windows). The description indicates that the issue affected multiple surfaces and was addressed by “improved che...

CVE-2018-4212

CVE-2018-4212 is referenced in connected documents as affecting WebKit components across iOS/Safari and related Apple platforms, where an unexpected interaction could trigger an ASSERT failure. Apple’s coverage for iOS 11.3 (and Safari/WebKit) notes an issue that was addressed by improved input/i...

CVE-2019-6234

CVE-2019-6234 is a memory corruption issue affecting WebKit components used by Safari and related Apple platforms. The vulnerability’s impact is arbitrary code execution when processing maliciously crafted web content. It was addressed by memory handling improvements and patching in iOS 12.1.3, i...

CVE-2018-4165

CVE-2018-4165 affects Apple WebKit components across multiple Apple platforms. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, via memory corruption in WebKit. Affected products include iOS prior to 11.3, Safari prior to 11.1, iCloud...

CVE-2018-4163

CVE-2018-4163 affects WebKit components in Apple platforms (iOS <11.3, Safari <11.1, iCloud <7.4 on Windows, iTunes <12.7.4 on Windows, tvOS <11.3, watchOS

CVE-2018-4207

CVE-2018-4207 affects WebKit/Apple platforms (iOS Safari, iCloud for Windows, tvOS, watchOS, iTunes for Windows) where an unexpected interaction caused an ASSERT failure. The issue was mitigated by improved checks, as documented in the NVD entry and corroborated by Apple advisories. Affected prod...

CVE-2018-4117

CVE-2018-4117 is a cross-origin fetch vulnerability in WebKit that could allow a crafted web site to bypass Same Origin Policy and exfiltrate data. Public references indicate affected products include Apple’s iOS Safari, watchOS, iCloud for Windows, and iTunes on Windows, with WebKit underlies th...

CVE-2018-4210

CVE-2018-4210 concerns WebKit’s JavaScriptCore on Apple platforms (iOS, Safari, tvOS, watchOS) and iTunes on Windows. The vulnerability is an array indexing issue in the handling of a function within JavaScriptCore, which could lead to memory corruption if exploited. Apple’s references indicate t...

CVE-2018-4129

CVE-2018-4129 affects Apple's WebKit on multiple platforms (iOS 11.3, Safari 11.1, tvOS 11.3, watchOS 4.3, iCloud/iTunes on Windows). The issue is a memory-corruption vulnerability in WebKit that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website....

CVE-2018-4213

The CVE-2018-4213 issue affects multiple Apple platforms: iOS (pre-11.3), Safari (pre-11.1), iCloud for Windows (pre-7.4), tvOS (pre-11.3), watchOS (pre-4.3), and iTunes for Windows (pre-12.7.4). The root cause is an unexpected interaction that could cause an ASSERT failure, addressed by improved...

CVE-2017-2363

CVE-2017-2363 affects Apple WebKit components across iOS (iOS before 10.2.1), Safari (before 10.0.3), tvOS (before 10.1.1) and watchOS (before 3.1.3). The issue permits a remote attacker to bypass the Same Origin Policy and exfiltrate sensitive data via a crafted web site, due to a WebKit prototy...

CVE-2017-2350

Affected products: iOS <10.2.1, Safari <10.0.3, tvOS

CVE-2017-2356

The CVE-2017-2356 issue affects Apple’s WebKit on multiple platforms (iOS before 10.2.1, Safari before 10.0.3, iCloud 6.1.1, iTunes 12.5.5, tvOS before 10.1.1). The underlying vulnerability is within WebKit and can be triggered by a crafted web site to perform remote code execution or cause a den...

CVE-2017-2355

CVE-2017-2355 affects WebKit in Apple ecosystems (iOS before 10.2.1; Safari before 10.0.3; iCloud before 6.1.1; iTunes before 12.5.5; tvOS before 10.1.1). The issue enables remote code execution or a denial of service via crafted web content, due to multiple memory corruption and related reliabil...

CVE-2017-2365

CVE-2017-2365 affects Apple WebKit components across iOS (pre-10.2.1), Safari (pre-10.0.3), and tvOS (pre-10.1.1). The issue enables cross-origin data exfiltration via crafted web content and is described in Apple’s security content for iOS 10.2.1 and tvOS 10.1.1. Apple indicates patches exist in...

CVE-2018-4127

CVE-2018-4127 affects Apple WebKit components across multiple Apple platforms (iOS < 11.3, Safari < 11.1, tvOS

CVE-2017-2369

The CVE-2017-2369 entry affects WebKit in Apple products (iOS < 10.2.1, Safari < 10.0.3, tvOS

CVE-2017-2373

CVE-2017-2373 concerns a memory-related issue in WebKit used by Apple products. The advisory states that iOS < 10.2.1, Safari < 10.0.3, and tvOS

CVE-2017-2354

CVE-2017-2354 affects WebKit in multiple Apple products (iOS, Safari, iCloud, iTunes, tvOS). A memory-corruption/remote-code-execution vector via crafted web content could crash or execute arbitrary code. Affected versions include iOS prior to 10.2.1, Safari prior to 10.0.3, iCloud prior to 6.1.1...

CVE-2018-4119

CVE-2018-4119 affects Apple’s WebKit component across multiple platforms (iOS prior to 11.3, Safari prior to 11.1, iCloud/Windows and tvOS variants). The issue allows remote attacker code execution or a memory-corruption–driven DoS via a crafted website, caused by memory handling/memory-corruptio...

CVE-2018-4113

CVE-2018-4113 affects WebKit’s JavaScriptCore in multiple Apple platforms (iOS <11.3, Safari

CVE-2018-4146

CVE-2018-4146 affects Apple WebKit components across iOS, Safari, tvOS, watchOS, iCloud/Desktop WebKit stack. The issue allows memory corruption triggered by a crafted website, potentially causing a denial of service. Affected: iOS before 11.3; Safari before 11.1; iCloud on Windows before 7.4; iT...

CVE-2018-4125

CVE-2018-4125 concerns Apple WebKit in multiple OSs (iOS, Safari, tvOS, watchOS) and related Apple apps (iCloud for Windows, iTunes for Windows). A crafted web site can trigger memory corruption in WebKit, enabling remote code execution or a denial of service. Affected versions include iOS before...

CVE-2018-4122

CVE-2018-4122 involves memory-corruption in WebKit/JIT on Apple platforms. Affected: iOS < 11.3, Safari < 11.1, iCloud for Windows < 7.4, iTunes < 12.7.4, tvOS < 11.3, watchOS

CVE-2018-4114

CVE-2018-4114 concerns the WebKit component in multiple Apple platforms. A memory corruption issue via a crafted website could allow remote code execution or a denial of service, affecting: iOS<11.3, Safari<11.1, iCloud<7.4 on Windows, iTunes<12.7.4 on Windows, tvOS<11.3, and watchOS

CVE-2018-4101

CVE-2018-4101 affects WebKit in Apple products (iOS < 11.3, Safari < 11.1, iCloud < 7.4 for Windows, iTunes < 12.7.4 on Windows, tvOS

CVE-2018-4120

Affected software: Apple iOS prior to 11.3, Safari prior to 11.1, iCloud for Windows prior to 7.4, iTunes for Windows prior to 12.7.4, and tvOS prior to 11.3, all involving WebKit. Root cause: memory corruption in WebKit leading to remote code execution or denial of service via a crafted web site...

CVE-2016-4761

CVE-2016-4761 affects WebKitGTK+ before 2.14.0. It is a use-after-free vulnerability in WebKitGTK+ that could allow remote attackers to cause a denial of service. The issue is fixed in WebKitGTK+ 2.14.0 and later. No exploitation details are provided in the supplied documents.

CVE-2018-11712

CVE-2018-11712 affects WebKitGTK/WebKitGTK+ libsoup backend. The WebKit source file SocketStreamHandleImplSoup.cpp failed to verify TLS certificates for WebSocket connections in WebKitGTK+ 2.20.0 and 2.20.1, enabling a potential man‑in‑the‑middle or spoofing scenario. The connected documents conf...

CVE-2018-4118

CVE-2018-4118 affects Apple's WebKit stack used by iOS ≤11.2/11.2.x and related components on macOS/tvOS, iCloud for Windows, and iTunes for Windows. Affected: WebKit-based rendering; vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted websit...

CVE-2018-11646

CVE-2018-11646 affects WebKitGTK+ (WebKit) up to at least 2.21.3, via WebKitFaviconDatabase.cpp when pageURL is unset, causing an application crash (DoS). Public exploitation code exists (Metasploit/Exploit-DB). Remediation in the provided advisories recommends upgrading to a newer WebKitGTK+ ver...

CVE-2018-4128

Technical details for CVE-2018-4128 are not publicly provided in the connected documents; available sources list the vulnerability but do not describe affected products, versions, impact, or fixes.

CVE-2018-12293

CVE-2018-12293 affects WebKitGTK+ and WPE WebKit: getImageData in ImageBufferCairo.cpp can overflow a heap due to integer overflow when computing image data size. Affected versions: WebKitGTK+ < 2.20.3 and WPE WebKit

CVE-2018-12911

CVE-2018-12911 affects WebKitGTK+ 2.20.3, with an off-by-one leading to an out-of-bounds write in xdg_mime_get_simple_globs within WebKitGTK+’s xdgmimecache.c/xdgmimeglob.c. The issue is exploitable via network without authentication and can impact confidentiality, integrity, and availability. Pu...