Sploitus

185 exploited vulnerabilities in Webkit

Showing 1–50 of 185, highest-scoring first

Vendors
Astra Linux, Centos, Debian, Linux Mint, Apple, Red Hat
With known exploits
185
Affected Apple Safari versions
< 17.3, 17.2, 17.0, 16.4, 16.5.2, 16.4.1, 15.5, 15.3, 14.0.3, 13.1.1, 14.0, 13.1, 13.1.2, 10.0, 15.0, 12.1.2, 12.1
Affected Apple Ipados versions
< 15.8.7, 16.7.5, 17.3, 17.2, 17.0, 17.0.1, 15.7.7, 16.4, 16.6, 15.7.5, 16.4.1, 15.5, 15.3.1, 14.4.1, 14.4, 13.5, 13.6, 15.0, 14.8, 14.0
Affected Apple Iphone Os versions
< 15.8.7, 16.7.5, 17.3, 17.2, 17.0, 17.0.1, 15.7.7, 16.4, 16.6, 15.7.5, 16.4.1, 15.5, 15.3.1, 14.4.1, 14.4, 13.5, 13.4, 13.6, 10.0, 15.0, 12.5.4, 14.8, 14.0, 12.4, 12.2
Affected Apple Macos versions
< 12.7.3, 13.6.4, 14.3, 14.2, 14.0, 13.3, 13.5, 13.3.1, 12.4, 12.2.1, 11.2.3, 11.2, 12.0.1
Affected Apple Tvos versions
< 17.3, 17.2, 17.0, 16.6, 15.5, 14.5, 13.4.5, 13.4, 13.4.8, 10.0, 15.0, 14.0, 12.4, 12.2
Affected Apple Visionos versions
< 1.0.2
Affected Apple Watchos versions
< 10.2, 10.0, 9.6, 8.6, 7.3.2, 6.2.5, 6.2, 6.2.8, 8.0, 7.0, 5.2, 5.3
Affected Apple Itunes versions
< 12.12.4, 12.10.7, 12.10.5, 12.10.8, 12.10.9, 12.9.6, 12.9.4

Vulnerabilities with exploits

Highest CVSS first — 17 of these already have exploit code on Sploitus

CVE-2024-23222 6 exploits
CVSS 10.0 HIGH 2023-07-18FIX AVAILABLE
corunaExploit for Type Confusion in Apple Safari
CVE-2023-42890
CVSS 10.0 HIGH 2023-10-12FIX AVAILABLE
CVE-2023-40414
CVSS 10.0 CRITICAL 2023-09-26FIX AVAILABLE
CVE-2023-41993 3 exploits
CVSS 10.0 HIGH 2023-07-18FIX AVAILABLE
Exploit for Improper Check for Unusual or Exceptional Conditions in Apple IpadosExploit for Improper Check for Unusual or Exceptional Conditions in Apple Ipados
CVE-2023-32435 1 exploit
CVSS 10.0 HIGH 2023-03-27FIX AVAILABLE
Exploit for Integer Overflow or Wraparound in Apple Ipados
CVE-2023-37450
CVSS 10.0 HIGH 2023-07-10FIX AVAILABLE
CVE-2023-28205
CVSS 10.0 HIGH 2023-04-07FIX AVAILABLE
CVE-2022-26717
CVSS 10.0 HIGH 2022-04-22FIX AVAILABLE
CVE-2022-22620
CVSS 10.0 HIGH 2021-09-18FIX AVAILABLE
CVE-2021-1844
CVSS 10.0 HIGH 2021-03-08FIX AVAILABLE
CVE-2021-1871
CVSS 10.0 CRITICAL 2021-01-26FIX AVAILABLE
CVE-2020-9850 3 exploits
CVSS 10.0 CRITICAL 2020-05-20FIX AVAILABLE
Safari in Operator Side Effect ExploitSafari Type Confusion / Sandbox Escape
CVE-2020-9948
CVSS 10.0 HIGH 2020-09-21FIX AVAILABLE
CVE-2020-3901 1 exploit
CVSS 10.0 HIGH 2020-03-13FIX AVAILABLE
Fuzzilli - A JavaScript Engine Fuzzer
CVE-2020-3897
CVSS 10.0 HIGH 2020-03-13FIX AVAILABLE
CVE-2020-3895
CVSS 10.0 HIGH 2020-03-13FIX AVAILABLE
CVE-2020-3900
CVSS 10.0 HIGH 2020-03-13FIX AVAILABLE
CVE-2020-3899
CVSS 10.0 HIGH 2020-03-13FIX AVAILABLE
CVE-2010-2300 1 exploit
CVSS 10.0 HIGH 2010-06-15FIX AVAILABLE
Webkit Normalize Bug - Android 2.2
CVE-2020-9915
CVSS 9.8 CRITICAL 2020-07-29FIX AVAILABLE
CVE-2016-4734
CVSS 9.6 CRITICAL 2016-09-25
CVE-2021-30851
CVSS 9.3 HIGH 2021-08-24FIX AVAILABLE
CVE-2021-30761
CVSS 9.3 HIGH 2019-11-04FIX AVAILABLE
CVE-2021-30818
CVSS 9.3 HIGH 2021-09-20FIX AVAILABLE
CVE-2020-9803
CVSS 9.3 HIGH 2020-05-20FIX AVAILABLE
CVE-2020-9947
CVSS 9.3 HIGH 2020-11-12FIX AVAILABLE
CVE-2019-8679
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
CVE-2019-8535
CVSS 9.3 HIGH 2019-03-25FIX AVAILABLE
CVE-2019-8523
CVSS 9.3 HIGH 2019-03-25FIX AVAILABLE
CVE-2019-8518 3 exploits
CVSS 9.3 HIGH 2019-03-25FIX AVAILABLE
Fuzzilli - A JavaScript Engine FuzzerWebKit JavaScriptCore - Out-Of-Bounds Access in FTL JIT due to LICM Moving Array Access Exploit
CVE-2019-8506 2 exploits
CVSS 9.3 HIGH 2019-03-25FIX AVAILABLE
WebKit JavaScriptCore - createRegExpMatchesArray Type Confusion ExploitWebKit JavaScriptCore - 'createRegExpMatchesArray' Type Confusion
CVE-2019-8672 3 exploits
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
Fuzzilli - A JavaScript Engine FuzzermacOS / iOS JavaScriptCore - JSValue Use-After-Free in ValueProfiles Exploit
CVE-2019-8666
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
CVE-2019-8689 3 exploits
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
Webkit JSC: JIT - Uninitialized Variable Access in ArgumentsEliminationPhase::transform ExploitWebkit JSC: JIT - Uninitialized Variable Access in ArgumentsEliminationPhase::transform
CVE-2019-8687
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
CVE-2019-8686
CVSS 9.3 HIGH 2019-07-24FIX AVAILABLE
CVE-2019-8683
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
CVE-2019-8681
CVSS 9.3 HIGH 2019-07-24FIX AVAILABLE
CVE-2019-8680
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
CVE-2019-8678 1 exploit
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
Fuzzilli - A JavaScript Engine Fuzzer
CVE-2019-8677
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
CVE-2017-7041 4 exploits
CVSS 9.3 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::Node::getFlag(CVE-2017-7041)WebKit WebCore::Node::getFlag Use-After-Free
CVE-2017-7042 4 exploits
CVSS 9.3 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::InputType::element(CVE-2017-7042)WebKit WebCore::InputType::element Use-After-Free
CVE-2010-1825
CVSS 9.3 HIGH 2010-09-24FIX AVAILABLE
CVE-2010-1824
CVSS 9.3 HIGH 2010-09-24
CVE-2010-0050 1 exploit
CVSS 9.3 HIGH 2010-03-12FIX AVAILABLE
Webkit (Apple Safari 4.0.5) - Blink Tag Stack Exhaustion Denial of Service
CVE-2010-0049 2 exploits
CVSS 9.3 HIGH 2010-03-12FIX AVAILABLE
webkit innerHTML UAF PoC ( CVE-2010-0049)WebKit 1.2.x - Right-to-Left Displayed Text Handling Memory Corruption
CVE-2009-2195 5 exploits
CVSS 9.3 HIGH 2009-08-12FIX AVAILABLE
Safari WebKit floating point number buffer overflowSafari WebKit floating point number buffer overflow
CVE-2009-1701 1 exploit
CVSS 9.3 HIGH 2009-06-10FIX AVAILABLE
Apple Safari 4.0多个安全漏洞
CVE-2023-28198
CVSS 9.0 HIGH 2023-03-27FIX AVAILABLE