WebKitGTK vulnerabilities

2 known vulnerabilities in WebKitGTK from The WebKitGTK Team. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  webkitgtk: Origin Validation Error

  CVE-2025-13947Dec 3, 2025The WebKitGTK Team

  A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations origi

• 7.5 High severity

  webkitgtk: Out-of-bounds Read

  CVE-2025-13502Nov 25, 2025The WebKitGTK Team

  A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.