Sploitus

185 exploited vulnerabilities in Webkit

Showing 101–150 of 185, highest-scoring first

Vendors
Apple, Canonical, Alt Linux, Suse, Xmlsoft, Astra Linux
With known exploits
185
Affected Apple Safari versions
≤ 10.0.3, 9.1.2, 9.1.1, 5.0.5, 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.0, 1.1.1, 1.2, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.3, 1.3.0, 1.3.1, 1.3.2, 2, 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 3, 3.0, 3.0.0, 3.0.0b, 3.0.1, 3.0.1b, 3.0.2, 3.0.2b, 3.0.3, 3.0.3b, 3.0.4, 17.0, 11.1.1, 2.0.4_419.3, 13.1.1, 9.0, 6.2.6, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 8.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.8, 17.1.2, 10.1
Affected Apple Iphone Os versions
All versions
Affected Apple Tvos versions
≤ 10.1.1, 9.2.2, 9.2.1, 17.0, 11.4, 13.4.5, 10.2
Affected Apple Ipados versions
< 17.0, 13.5, 15.8.1, 16.7.3, 17.1.2
Affected Apple Macos versions
< 14.0, 14.1.2
Affected Apple Watchos versions
< 10.0, 4.3.1, 6.2.5
Affected Google Chrome versions
≤ 46.0.2490.86, 11.0.696.71, 7.0.517.44, 18.0.1025.168, 5.0.375.70
Affected Apple Webkit versions
= build_18794

Vulnerabilities with exploits

Highest CVSS first — 22 of these already have exploit code on Sploitus

CVE-2017-2468 4 exploits
CVSS 8.8 HIGH 2017-04-01FIX AVAILABLE
Apple WebKit - Document::adoptNode Use-After-Free ExploitApple WebKit - 'Document::adoptNode' Use-After-Free
CVE-2017-2469 4 exploits
CVSS 8.8 HIGH 2017-04-01FIX AVAILABLE
Apple WebKit - JSC::SymbolTableEntry::isWatchable Heap Buffer Overflow ExploitApple WebKit - 'JSC::SymbolTableEntry::isWatchable' Heap Buffer Overflow
CVE-2017-2446 8 exploits
CVSS 8.8 HIGH 2017-04-01FIX AVAILABLE
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple SafariExploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2016-4622 4 exploits
CVSS 8.8 HIGH 2016-03-29
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple SafariExploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2016-1857
CVSS 8.8 HIGH 2016-03-29
CVE-2011-1774 11 exploits
CVSS 8.8 HIGH 1970-01-01
Cross Platform Webkit File DropperApple Safari libxslt File Create
CVE-2023-42875
CVSS 8.5 HIGH 2023-10-12FIX AVAILABLE
CVE-2017-2447 3 exploits
CVSS 8.1 HIGH 2017-04-01FIX AVAILABLE
Apple Safari - Out-of-Bounds Read when Calling Bound Function ExploitSafari Browser: Out-of-bounds read when calling bound function(CVE-2017-2447)
CVE-2018-4192 3 exploits
CVSS 7.5 HIGH 2018-06-08FIX AVAILABLE
JavaScript Core - Arbitrary Code Execution ExploitJavaScript Core Arbitrary Code Execution
CVE-2017-2419 1 exploit
CVSS 7.5 HIGH 2017-04-01FIX AVAILABLE
Microsoft Edge Content Security Bypass Vulnerability
CVE-2015-6769 1 exploit
CVSS 7.5 HIGH 2015-09-29
Chrome Universal XSS via the unload_event module (CVE-2015-6769)
CVE-2011-1804 1 exploit
CVSS 7.5 HIGH 2011-05-24FIX AVAILABLE
Google Chrome浮点渲染内存破坏漏洞
CVE-2010-4204
CVSS 7.5 HIGH 2010-11-05FIX AVAILABLE
CVE-2010-4197
CVSS 7.5 HIGH 2010-11-05FIX AVAILABLE
CVE-2007-0342 1 exploit
CVSS 7.5 HIGH 2007-01-18
Apple WebKit build 18794 - WebCore Remote Denial of Service
CVE-2006-3946
CVSS 7.5 HIGH 2006-07-31FIX AVAILABLE
CVE-2020-9805
CVSS 7.1 HIGH 2020-05-20FIX AVAILABLE
CVE-2009-1692 5 exploits
CVSS 7.1 HIGH 2009-06-19FIX AVAILABLE
ECMAScript Denial Of ServiceMultiple Browsers - Denial of Service
CVE-2015-5928
CVSS 6.8 MEDIUM 2015-10-23FIX AVAILABLE
CVE-2015-3659
CVSS 6.8 MEDIUM 2015-07-01FIX AVAILABLE
CVE-2015-3658
CVSS 6.8 MEDIUM 2015-07-02FIX AVAILABLE
CVE-2015-5822
CVSS 6.8 MEDIUM 2015-09-16FIX AVAILABLE
CVE-2015-5809
CVSS 6.8 MEDIUM 2015-09-16FIX AVAILABLE
CVE-2015-5801
CVSS 6.8 MEDIUM 2015-09-16FIX AVAILABLE
CVE-2015-5794
CVSS 6.8 MEDIUM 2015-09-16FIX AVAILABLE
CVE-2015-3749
CVSS 6.8 MEDIUM 2015-08-16FIX AVAILABLE
CVE-2015-3748
CVSS 6.8 MEDIUM 2015-08-16FIX AVAILABLE
CVE-2015-3747
CVSS 6.8 MEDIUM 2015-08-16FIX AVAILABLE
CVE-2015-3745
CVSS 6.8 MEDIUM 2015-08-16FIX AVAILABLE
CVE-2015-3743
CVSS 6.8 MEDIUM 2015-08-16FIX AVAILABLE
CVE-2015-3741
CVSS 6.8 MEDIUM 2015-08-16FIX AVAILABLE
CVE-2015-3731
CVSS 6.8 MEDIUM 2015-08-16FIX AVAILABLE
CVE-2012-1521
CVSS 6.8 MEDIUM 2012-04-30FIX AVAILABLE
CVE-2010-4206
CVSS 6.8 MEDIUM 2010-11-05FIX AVAILABLE
CVE-2010-1772
CVSS 6.8 MEDIUM 2010-09-24FIX AVAILABLE
CVE-2008-0985 2 exploits
CVSS 6.8 MEDIUM 2008-03-06FIX AVAILABLE
Google Android Web Browser - '.GIF' File Heap Buffer OverflowCore Security Technologies Advisory 2008.0124
CVE-2023-42916
CVSS 6.5 MEDIUM 2023-07-18FIX AVAILABLE
CVE-2017-2493 2 exploits
CVSS 6.5 MEDIUM 2018-04-03FIX AVAILABLE
WebKit: UXSS through HTMLObjectElement::updateWidget(CVE-2017-2493)WebKit HTMLObjectElement::updateWidget Universal XSS
CVE-2017-2371 3 exploits
CVSS 6.5 MEDIUM 2017-02-11FIX AVAILABLE
Apple WebKit Pop-Up Blocker Bypass ExploitApple WebKit 10.0.2 - Cross-Origin or Sandboxed IFRAME Pop-up Blocker Bypass
CVE-2017-2367 4 exploits
CVSS 6.5 MEDIUM 2017-04-01FIX AVAILABLE
Apple Webkit Named Property UXSSApple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window
CVE-2017-2365 3 exploits
CVSS 6.5 MEDIUM 2017-02-11FIX AVAILABLE
Apple WebKit Frame::setDocument UXSS ExploitApple WebKit 10.0.2 - 'Frame::setDocument' Universal Cross-Site Scripting
CVE-2017-2364 4 exploits
CVSS 6.5 MEDIUM 2017-02-11FIX AVAILABLE
Apple WebKit Frame::setDocument UXSSApple WebKit 10.0.2(12602.3.12.0.1) - Frame::setDocument (1) Universal Cross-Site Scripting Exploit
CVE-2017-2363 3 exploits
CVSS 6.5 MEDIUM 2017-02-11FIX AVAILABLE
Apple WebKit 10.0.2 - FrameLoader::clear Universal Cross-Site Scripting ExploitApple WebKit 10.0.2 - 'FrameLoader::clear' Universal Cross-Site Scripting
CVE-2017-2479 3 exploits
CVSS 6.5 MEDIUM 2017-04-01FIX AVAILABLE
Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting ExploitApple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Link Element
CVE-2017-2480 4 exploits
CVSS 6.5 MEDIUM 2017-04-01FIX AVAILABLE
Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting ExplApple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting
CVE-2017-2442 4 exploits
CVSS 6.5 MEDIUM 2017-04-01FIX AVAILABLE
Apple WebKit JSCallbackData UXSSApple Webkit - JSCallbackData Universal Cross-Site Scripting Exploit
CVE-2016-1779
CVSS 6.5 MEDIUM 2016-03-24FIX AVAILABLE
CVE-2021-1826
CVSS 6.1 MEDIUM 2020-11-23FIX AVAILABLE
CVE-2018-6128
CVSS 6.1 MEDIUM 2018-06-01FIX AVAILABLE
CVE-2019-8658
CVSS 6.1 MEDIUM 2019-07-24FIX AVAILABLE