The Webkitgtk Team Webkitgtk vulnerabilities

3 known vulnerabilities affecting the_webkitgtk_team/webkitgtk.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH3

Vulnerabilities

Page 1 of 1

CVE-2025-66287HIGHCVSS 8.8fixed in 2.50.32025-12-04

CVE-2025-66287 [HIGH] CWE-120 CVE-2025-66287: A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process cras A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

CVE-2025-13947HIGHCVSS 7.4fixed in 2.50.32025-12-03

CVE-2025-13947 [HIGH] CWE-346 CVE-2025-13947: A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosur A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.

CVE-2025-13502HIGHCVSS 7.5fixed in 2.50.22025-11-25

CVE-2025-13502 [HIGH] CWE-125 CVE-2025-13502: A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and in A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.