W
Vendor security profile4 actively exploited CVEs
webkitgtk
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical0
CISA KEV4
Public exploit4
Patch rate%0
Avg. CVSS8.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
0
0
CVE KEV
CVE severity distribution
6toplam CVE
High6 (100%)
Patch and exploitation view
%0
Verified patch
%67
CISA KEV
%67
Public exploit
0Patch available
0Partial
3Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
8.8
CVE-2026-83596
Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature
W
Patch status unknownEPSS %0
8.8
CVE-2026-78376
Webkitgtk: use-after-free of jscvalue function parameters
W
Patch status unknownEPSS %0
8.8
CVE-2025-31277 Actively exploited
Memory buffer overflow in Apple Safari
A
WorkaroundEPSS %2
8.8
CVE-2025-6558 Actively exploited
Improper input validation in Google Chrome
G
WorkaroundEPSS %9
8.8
CVE-2019-8720 Actively exploited
Memory buffer overflow in N/a Webkitgtk
N
WorkaroundEPSS %2
8.8
CVE-2022-2294 Actively exploited
Vulnerability in Google Chrome
G
Patch status unknownEPSS %70