PatchTheCVEwebkit vulnerabilities
Recent CVEs affecting webkit products. 4 tracked.
webkit has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-10-16. Highest priority: CVE-2020-9948 (score 55/100).
- CVE-2020-9948 HIGH 8.8 UPGRADE UPGRADE A type confusion issue was addressed with improved memory handling
- CVE-2018-12294 HIGH 8.8 UPGRADE WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20
- CVE-2016-9643 HIGH 7.5 DOWNGRADE The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as d
- CVE-2016-9642 MEDIUM 5.5 MITIGATE JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted
FAQ
How do I fix webkit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webkit being exploited right now?
None of the tracked webkit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webkit CVE should I patch first?
CVE-2020-9948 currently ranks highest (55/100): A type confusion issue was addressed with improved memory handling.