W
Vendor security profile
webkitgtk
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
7toplam CVE
Uncertain7 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
8.8
CVE-2026-83596Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature
Patch status unknownEPSS %0
8.8
CVE-2026-78376Webkitgtk: use-after-free of jscvalue function parameters
Patch status unknownEPSS %0
7.4
CVE-2025-13947Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop
Patch status unknownEPSS %0
8.8
CVE-2025-31277 Actively exploitedMemory buffer overflow in Apple Safari
WorkaroundEPSS %2
8.8
CVE-2025-6558 Actively exploitedImproper input validation in Google Chrome
WorkaroundEPSS %11
8.8
CVE-2019-8720 Actively exploitedMemory buffer overflow in N/a Webkitgtk
WorkaroundEPSS %2
8.8
CVE-2022-2294 Actively exploitedVulnerability in Google Chrome
Patch status unknown Public Exploits:10EPSS %71