Approved changes feed: RSS · Atom
cpe:2.3:a:webkit:webkit:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Webkit (6e576ba3-891d-5770-b179-2f93ba678046) |
|---|---|
| Product | Webkit (57cbf4bc-de9b-50c0-96f2-cda85e1c322b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/webkit/webkit |
purl2cpe | 2026-06-01 10:12:24.867121 |
pkg:webkit/webkit |
purl2cpe | 2026-06-01 10:12:24.867124 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-78376 |
vulnerable | 2026-10-13 12:29:30.571700 |
Webkitgtk: use-after-free of jscvalue function parameters
HIGH (8.8)
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.
Published: 2026-08-24T13:29:17.412Z
Updated: 2026-11-05T05:05:58.295Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-83596 |
vulnerable | 2026-10-13 12:28:37.395200 |
Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature
HIGH (8.8)
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
Published: 2026-08-31T20:46:24.116Z
Updated: 2026-11-05T05:07:16.824Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39928 |
vulnerable | 2026-06-08 06:09:38.116498 |
Details available
HIGH (8.8)
A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.
Published: 2023-10-06T15:17:20.078Z
Updated: 2025-11-04T19:17:45.371Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1766 |
vulnerable | 2026-06-08 04:54:10.268254 |
Details available
Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products, allows remote websockets servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an upgrade header that is long and invalid.
Published: 2010-07-22T01:00:00.000Z
Updated: 2024-08-07T01:35:53.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3933 |
vulnerable | 2026-06-08 04:51:45.350980 |
Details available
WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions.
Published: 2009-11-12T16:00:00.000Z
Updated: 2024-08-07T06:45:50.882Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6059 |
vulnerable | 2026-06-08 04:50:53.918251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.