W
Vendor security profile
WebKit
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs2
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS8.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
0
0
CVE KEV
CVE severity distribution
2toplam CVE
High2 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
8.8
CVE-2026-83596
Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature
W
Patch status unknownEPSS %0
8.8
CVE-2026-78376
Webkitgtk: use-after-free of jscvalue function parameters
W
Patch status unknownEPSS %0
8.8
CVE-2025-31277 Actively exploited
Memory buffer overflow in Apple Safari
A
WorkaroundEPSS %2
8.8
CVE-2025-6558 Actively exploited
Improper input validation in Google Chrome
G
WorkaroundEPSS %9
8.8
CVE-2019-8720 Actively exploited
Memory buffer overflow in N/a Webkitgtk
N
WorkaroundEPSS %2
8.8
CVE-2022-2294 Actively exploited
Vulnerability in Google Chrome
G
Patch status unknownEPSS %70