Wpe Webkit vulnerabilities

10 known vulnerabilities in Wpe Webkit from Wpewebkit. 9 are rated high or critical, and 7 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Safari: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-43343Sep 15, 2025Apple

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

• 9.8 Critical severity

  A correctness issue was addressed with improved checks.

  CVE-2025-43342Sep 15, 2025Apple

  A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected pro

• 8.8 High severity

  Apple Multiple Products Buffer Overflow Exploited

  CVE-2025-31277Jul 30, 2025AppleEPSS 1.68%

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

• 8.8 High severity

  Google Chromium ANGLE and GPU Improper Input Validation Exploited

  CVE-2025-6558Jul 15, 2025GoogleEPSS 10.9%

  Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

• 5.5 Medium severity

  Apple Multiple Products Improper Authentication Exploited

  CVE-2024-27834May 14, 2024AppleEPSS 1.5%

  The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Poi

• 8.8 High severity

  macOS: Use After Free

  CVE-2023-28198Aug 14, 2023Apple

  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.

• 8.8 High severity

  WebKitGTK Memory Corruption Exploited

  CVE-2019-8720Mar 6, 2023WebKitGTKEPSS 1.56%

  A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

• 8.8 High severity

  Apple iOS and macOS Out-of-Bounds Write Exploited

  CVE-2022-32893Aug 24, 2022AppleEPSS 10.5%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware

• 8.8 High severity

  WebRTC Heap Buffer Overflow Exploited

  CVE-2022-2294Jul 28, 2022GoogleEPSS 70.8%

  Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• 7.8 High severity

  Apple Multiple Products Integer Overflow or Wraparound Exploited

  CVE-2021-30952Aug 24, 2021AppleEPSS 6.96%

  An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.