https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-9948.htmlhttps://patchthecve.com/cve/CVE-2020-9948.htmlWed, 17 Jun 2026 03:28:51 +0000HIGH 8.8: A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.https://patchthecve.com/cve/CVE-2018-12294.htmlhttps://patchthecve.com/cve/CVE-2018-12294.htmlWed, 17 Jun 2026 01:37:30 +0000HIGH 8.8: WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object.https://patchthecve.com/cve/CVE-2016-9643.htmlhttps://patchthecve.com/cve/CVE-2016-9643.htmlWed, 17 Jun 2026 00:56:23 +0000HIGH 7.5: The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) followed by {-2,16} and a large number of +) (plus close parenthesis).https://patchthecve.com/cve/CVE-2016-9642.htmlhttps://patchthecve.com/cve/CVE-2016-9642.htmlWed, 17 Jun 2026 00:56:23 +0000MEDIUM 5.5: JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.