p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de webkit2gtk · Page n° 15

Vulnérabilité publiée pour webkit2gtk au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 966

  1. CVE-2025-43535

    Moyenne · CVSS 4.3EPSS 0,85%Correctif disponible

    CVE-2025-43535

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Mettez à jour vers 2.50.4-1~deb13u1
    Publication Mise à jour
  2. CVE-2025-43529

    Élevée · CVSS 8.8EPSS 25,65%Dans le catalogue KEVCode d’exploitation publicCorrectif disponible

    CVE-2025-43529

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

    • Mettez à jour vers 2.50.4-1~deb13u1
    Publication Mise à jour
  3. CVE-2025-43531

    Faible · CVSS 3.1EPSS 0,45%Correctif disponible

    CVE-2025-43531

    A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Mettez à jour vers 2.50.4-1~deb13u1
    Publication Mise à jour
  4. CVE-2025-43536

    Moyenne · CVSS 4.3EPSS 0,58%Correctif disponible

    CVE-2025-43536

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Mettez à jour vers 2.50.4-1~deb13u1
    Publication Mise à jour
  5. CVE-2025-43541

    Moyenne · CVSS 4.3EPSS 34,14%Correctif disponible

    CVE-2025-43541

    A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

    • Mettez à jour vers 2.50.4-1~deb13u1
    Publication Mise à jour
  6. CVE-2025-43501

    Moyenne · CVSS 4.3EPSS 0,77%Correctif disponible

    CVE-2025-43501

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Mettez à jour vers 2.50.4-1~deb13u1
    Publication Mise à jour
  7. CVE-2025-43511

    Moyenne · CVSS 6.5EPSS 0,46%Correctif disponible

    CVE-2025-43511

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Mettez à jour vers 2.50.6-1~deb13u1
    Publication Mise à jour
  8. CVE-2025-14174

    Élevée · CVSS 8.8EPSS 55,33%Dans le catalogue KEVCode d’exploitation publicCorrectif disponible

    CVE-2025-14174

    Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

    • Mettez à jour vers 2.50.4-1~deb13u1
    Publication Mise à jour
  9. CVE-2025-48622

    Moyenne · CVSS 5.5EPSS 0,11%Correctif disponible

    CVE-2025-48622

    In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

    • Mettez à jour vers 2.54.0-1~deb13u1
    Publication Mise à jour
  10. CVE-2025-13947

    Élevée · CVSS 7.4EPSS 0,33%Correctif disponible

    Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

    A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.

    • Mettez à jour vers 2.50.3-1~deb13u1
    Publication Mise à jour
  11. CVE-2025-13502

    Élevée · CVSS 7.5EPSS 0,62%Correctif disponible

    Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

    A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.

    • Mettez à jour vers 2.50.2-1~deb13u1
    Publication Mise à jour
  12. CVE-2023-43000

    Élevée · CVSS 8.8EPSS 4,04%Dans le catalogue KEVCorrectif disponible

    CVE-2023-43000

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

    • Mettez à jour vers 2.42.0-1
    Publication Mise à jour
  13. CVE-2025-43430

    Moyenne · CVSS 4.3EPSS 1,09%Correctif disponible

    CVE-2025-43430

    This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Mettez à jour vers 2.50.2-1~deb13u1
    Publication Mise à jour
  14. CVE-2025-43427

    Moyenne · CVSS 4.3EPSS 0,55%Correctif disponible

    CVE-2025-43427

    This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Mettez à jour vers 2.50.2-1~deb13u1
    Publication Mise à jour
  15. CVE-2025-43431

    Élevée · CVSS 8.8EPSS 0,85%Correctif disponible

    CVE-2025-43431

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.

    • Mettez à jour vers 2.50.2-1~deb13u1
    Publication Mise à jour
  16. CVE-2025-43457

    Moyenne · CVSS 6.5EPSS 0,61%Correctif disponible

    CVE-2025-43457

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

    • Mettez à jour vers 2.50.6-1~deb13u1
    Publication Mise à jour
  17. CVE-2025-43441

    Moyenne · CVSS 4.3EPSS 0,96%Correctif disponible

    CVE-2025-43441

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

    • Mettez à jour vers 2.50.2-1~deb13u1
    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →