webkit vulnerabilities and fixes

Recent CVEs affecting webkit, with upgrade or downgrade steps. 88 tracked.

webkit has 88 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 81. Most recent: 2017-12-27. Highest priority: CVE-2017-7042 (score 60/100).

• CVE-2017-7157 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7156 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7061 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7056 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7055 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7052 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7049 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7048 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7046 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7042 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7041 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7039 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7038 MEDIUM 6.1 UPGRADE UPGRADE A DOMParser XSS issue was discovered in certain Apple products
• CVE-2017-7037 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7034 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7030 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7020 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7019 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7018 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-7006 MEDIUM 5.3 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13870 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13866 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13856 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13803 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13802 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13798 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13796 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13795 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13794 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13793 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13792 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13791 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13788 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13785 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13784 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2017-13783 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in certain Apple products
• CVE-2016-9643 HIGH 7.5 DOWNGRADE The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as d
• CVE-2016-9642 MEDIUM 5.5 MITIGATE JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted
• CVE-2016-4592 MEDIUM 6.5 MITIGATE UPGRADE WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause
• CVE-2016-4591 HIGH 7.5 MITIGATE WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable,
• CVE-2016-4590 MEDIUM 5.4 UPGRADE MITIGATE WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers
• CVE-2016-4589 HIGH 8.8 MITIGATE WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execut
• CVE-2016-4588 HIGH 8.8 MITIGATE WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of servi
• CVE-2016-4587 MEDIUM 6.5 MITIGATE WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information
• CVE-2016-4585 MEDIUM 6.1 MITIGATE Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3,
• CVE-2016-4583 LOW 3.1 MITIGATE UPGRADE WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass
• CVE-2014-1270 MEDIUM 6.8 UPGRADE MITIGATE WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrar
• CVE-2014-1269 MEDIUM 6.8 UPGRADE MITIGATE WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrar
• CVE-2014-1268 MEDIUM 6.8 UPGRADE MITIGATE WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrar
• CVE-2013-5228 MEDIUM 6.8 UPGRADE UPGRADE WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrar
• CVE-2013-5225 MEDIUM 6.8 UPGRADE MITIGATE WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrar
• CVE-2013-5199 MEDIUM 6.8 UPGRADE UPGRADE WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrar
• CVE-2013-5198 MEDIUM 6.8 UPGRADE MITIGATE WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrar
• CVE-2013-5197 MEDIUM 6.8 UPGRADE MITIGATE WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrar
• CVE-2013-5196 MEDIUM 6.8 UPGRADE UPGRADE WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrar
• CVE-2013-5195 MEDIUM 6.8 UPGRADE MITIGATE WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrar
• CVE-2012-5851 MEDIUM 4.3 MITIGATE UPGRADE html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does no
• CVE-2012-0648 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2012-0639 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2012-0638 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2012-0637 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2012-0636 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2012-0634 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-4692 MEDIUM 5.0 UPGRADE MITIGATE WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture o
• CVE-2011-3244 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-3241 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-3239 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-3238 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-3237 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-3236 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-3235 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-3233 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2866 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2831 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2820 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2817 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2816 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2815 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2814 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2813 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2811 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2809 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2356 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2354 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2352 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2341 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2339 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c
• CVE-2011-2338 HIGH 7.6 UPGRADE MITIGATE WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or c

FAQ

How do I fix webkit vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is webkit being exploited right now?

None of the tracked webkit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which webkit CVE should I patch first?

CVE-2017-7042 currently ranks highest (60/100): An issue was discovered in certain Apple products.

RSS feed for webkit · ← Back to latest CVEs