PatchTheCVEwpe webkit vulnerabilities and fixes
Recent CVEs affecting wpe webkit, with upgrade or downgrade steps. 4 tracked.
Also searched as: wpewebkit.
wpe webkit has 4 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 4. Most recent: 2023-09-06. Highest priority: CVE-2019-8720 (score 80/100).
- CVE-2019-8720 HIGH 8.8 EXPLOITED UPGRADE UPGRADE WebKitGTK Memory Corruption Vulnerability
- CVE-2023-40397 CRITICAL 9.8 UPGRADE UPGRADE The issue was addressed with improved checks
- CVE-2023-32370 MEDIUM 5.3 UPGRADE UPGRADE A logic issue was addressed with improved validation
- CVE-2023-28198 HIGH 8.8 UPGRADE UPGRADE A use-after-free issue was addressed with improved memory management
FAQ
How do I fix wpe webkit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpe webkit being exploited right now?
Yes: 1 wpe webkit CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which wpe webkit CVE should I patch first?
CVE-2019-8720 currently ranks highest (80/100): WebKitGTK Memory Corruption Vulnerability.