CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,443
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product webkitgtk:webkitgtk. Show all products

12 CVEs, showing 1 to 12
CVESeverityTitlePublished
CVE-2021-1789
Known exploited
High 8.8A type confusion issue was addressed with improved state handling.
Assigned by apple
Apr 2, 2021
CVE-2021-1870
Known exploited
Critical 9.8A logic issue was addressed with improved restrictions.
Assigned by apple
Apr 2, 2021
CVE-2021-30952
Known exploited
High 8.8An integer overflow was addressed with improved input validation.
Assigned by apple
Aug 24, 2021
CVE-2022-2294
Known exploited
High 8.8Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Assigned by Chrome
Jul 28, 2022
CVE-2022-32893
Known exploited
High 8.8An out-of-bounds write issue was addressed with improved bounds checking.
Assigned by apple
Aug 24, 2022
CVE-2019-8720
Known exploited
High 8.8A vulnerability was found in WebKit.
Assigned by redhat
Mar 6, 2023
CVE-2025-6558
Known exploited
High 8.8Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Assigned by Chrome
Jul 15, 2025
CVE-2025-31277
Known exploited
High 8.8The issue was addressed with improved memory handling.
Assigned by apple
Jul 29, 2025
CVE-2025-43342Critical 9.8A correctness issue was addressed with improved checks.Sep 15, 2025
CVE-2025-43343Critical 9.8The issue was addressed with improved memory handling.Sep 15, 2025
CVE-2026-78376High 8.8Webkitgtk: use-after-free of jscvalue function parameters
Assigned by redhat
Aug 24, 2026
CVE-2026-83596High 8.8Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature
Assigned by redhat
Aug 31, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.