p PatchFirst

PatchFirst · Latest vulnerabilities

webkit2gtk vulnerabilities · Page 46

Vulnerabilities published for webkit2gtk in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 960

  1. CVE-2017-2454

    High · CVSS 8.8EPSS 6.74%Public exploitFix available

    CVE-2017-2454

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Update to 2.14.6-1
    Published Updated
  2. CVE-2017-2447

    High · CVSS 8.1EPSS 5.14%Public exploitFix available

    CVE-2017-2447

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted web site.

    • Update to 2.16.3-2
    Published Updated
  3. CVE-2017-2446

    High · CVSS 8.8EPSS 8.26%Public exploitFix available

    CVE-2017-2446

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of strict mode functions.

    • Update to 2.14.6-1
    Published Updated
  4. CVE-2017-2445

    Medium · CVSS 6.1EPSS 4.27%Public exploitFix available

    CVE-2017-2445

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted frame objects.

    • Update to 2.16.3-2
    Published Updated
  5. CVE-2017-2442

    Medium · CVSS 6.5EPSS 6.17%Public exploitFix available

    CVE-2017-2442

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

    • Update to 2.14.6-1
    Published Updated
  6. CVE-2017-2433

    High · CVSS 8.8EPSS 1.85%Fix available

    CVE-2017-2433

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Update to 2.16.3-2
    Published Updated
  7. CVE-2017-2424

    Medium · CVSS 6.5EPSS 1.68%Fix available

    CVE-2017-2424

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site.

    • Update to 2.16.3-2
    Published Updated
  8. CVE-2017-2415

    High · CVSS 8.8EPSS 3.12%Fix available

    CVE-2017-2415

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code by leveraging an unspecified "type confusion."

    • Update to 2.14.6-1
    Published Updated
  9. CVE-2017-2405

    High · CVSS 8.8EPSS 1.83%Fix available

    CVE-2017-2405

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Update to 2.16.3-2
    Published Updated
  10. CVE-2017-2396

    High · CVSS 8.8EPSS 1.83%Fix available

    CVE-2017-2396

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Update to 2.16.3-2
    Published Updated
  11. CVE-2017-2395

    High · CVSS 8.8EPSS 1.83%Fix available

    CVE-2017-2395

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Update to 2.16.3-2
    Published Updated
  12. CVE-2017-2394

    High · CVSS 8.8EPSS 1.84%Fix available

    CVE-2017-2394

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Update to 2.14.6-1
    Published Updated
  13. CVE-2017-2386

    Medium · CVSS 6.5EPSS 1.7%Fix available

    CVE-2017-2386

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

    • Update to 2.16.3-2
    Published Updated
  14. CVE-2017-2377

    High · CVSS 7.5EPSS 1.95%Fix available

    CVE-2017-2377

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service (memory corruption and application crash) by leveraging a window-close action during a debugger-pause state.

    • Update to 2.14.6-1
    Published Updated
  15. CVE-2017-2373

    High · CVSS 8.8EPSS 6.07%Public exploitFix available

    CVE-2017-2373

    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Update to 2.14.4-1
    Published Updated
  16. CVE-2017-2369

    High · CVSS 8.8EPSS 6.07%Public exploitFix available

    CVE-2017-2369

    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Update to 2.14.4-1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →