p PatchFirst

PatchFirst · Latest vulnerabilities

webkit2gtk vulnerabilities · Page 35

Vulnerabilities published for webkit2gtk in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 966

  1. CVE-2019-8518

    High · CVSS 8.8EPSS 11.19%Public exploitFix available

    CVE-2019-8518

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

    • Update to 2.24.1-1
    Published Updated
  2. CVE-2019-8515

    Medium · CVSS 6.5EPSS 1.23%Fix available

    CVE-2019-8515

    A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.

    • Update to 2.24.1-1
    Published Updated
  3. CVE-2019-8506

    High · CVSS 8.8EPSS 16.16%In KEVPublic exploitFix available

    CVE-2019-8506

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

    • Update to 2.24.1-1
    Published Updated
  4. CVE-2019-6237

    High · CVSS 8.8EPSS 1.96%Fix available

    CVE-2019-6237

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

    • Update to 2.24.1-1
    Published Updated
  5. CVE-2019-11070

    Medium · CVSS 5.3EPSS 3.29%Fix available

    CVE-2019-11070

    WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded.

    • Update to 2.24.1-1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →