WebKit vulnerabilities and fixes

CVEs that mention WebKit, ranked by priority. 2 tracked.

WebKit has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-08-13. Highest priority: CVE-2026-16770 (score 56/100).

• CVE-2026-16770 CRITICAL 9.8 PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the sourc
• CVE-2026-17431 MEDIUM 6.1 PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in

FAQ

How do I fix WebKit vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is WebKit being exploited right now?

None of the tracked WebKit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which WebKit CVE should I patch first?

CVE-2026-16770 currently ranks highest (56/100): PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the sourc.

← Back to latest CVEs