Webkitgtk+ Security Vulnerabilities and Issues — Webkitgtk+ CVE List

Lucene search

WebkitgtkWebkitgtk+

11 matches found

CVE•added 2017/02/20 8:59 a.m.•116 views

CVE-2017-2363

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sen...

6.5CVSS5.7AI score0.22777EPSS

CVE•added 2017/02/20 8:59 a.m.•115 views

CVE-2017-2356

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arb...

8.8CVSS8.1AI score0.00584EPSS

CVE•added 2017/02/20 8:59 a.m.•109 views

CVE-2017-2369

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app...

8.8CVSS7.8AI score0.04575EPSS

CVE•added 2017/02/20 8:59 a.m.•108 views

CVE-2017-2350

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted w...

6.5CVSS5.6AI score0.00522EPSS

CVE•added 2017/02/20 8:59 a.m.•105 views

CVE-2017-2355

8.8CVSS7.9AI score0.00824EPSS

CVE•added 2017/02/20 8:59 a.m.•105 views

CVE-2017-2373

8.8CVSS7.5AI score0.06651EPSS

CVE•added 2017/02/20 8:59 a.m.•104 views

CVE-2017-2365

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted w...

6.5CVSS5.7AI score0.19545EPSS

CVE•added 2017/02/20 8:59 a.m.•99 views

CVE-2017-2354

8.8CVSS8.1AI score0.00584EPSS

CVE•added 2017/02/20 8:59 a.m.•72 views

CVE-2017-2360

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or c...

9.3CVSS6.8AI score0.03244EPSS

CVE•added 2017/11/01 9:29 p.m.•53 views

CVE-2017-1000122

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products.

5.3CVSS6.3AI score0.00377EPSS

CVE•added 2017/11/01 9:29 p.m.•52 views

CVE-2017-1000121

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products.

9.8CVSS8.9AI score0.00647EPSS