CyberSecBulletin

The WebKitGTK Team vulnerabilities

We track 2 vulnerabilities in The WebKitGTK Team products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 3, 2025.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest The WebKitGTK Team vulnerabilities

  • 7.4 High severity

    webkitgtk: Origin Validation Error

    CVE-2025-13947The WebKitGTK Team

    A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations origi

  • 7.5 High severity

    webkitgtk: Out-of-bounds Read

    CVE-2025-13502The WebKitGTK Team

    A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.