W
WebKitGTK
Security Risk Profile
85
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 135 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 24, 2010 to present
135
Total CVEs
95
Critical+High
1
Exploited
14
Unpatched
Threat Assessment
Avg CVSS
8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
14
Critical/High
Risk Level
85/100
critical
⚠️ 1 Active Exploits
Severity Distribution
Critical
21High
74Medium
37Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
51
2
Use After Free
38
3
Input Validation
36
4
Race Condition
18
5
Integer Overflow
10
Most Affected Products
1. alpine/webkit2gtk390
2. ubuntu/webkit2gtk140
3. Apple Safari131
4. Apple tvOS107
5. debian/webkit2gtk95
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q3/521
unknown
WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005
Aug 19, 2026🔧 No Patch
CVE-2025-43343
CVSS 9.8critical
Sep 15, 2025
CVE-2025-43342
CVSS 9.8critical
Sep 15, 2025
CVE-2025-31277
CVSS 8.8high
Apple Multiple Products Buffer Overflow Vulnerability
Jul 29, 2025
CVE-2025-6558
CVSS 8.8EPSS 0%high
Medium Incorrect validation of untrusted input in ANGLE and GPU
Jul 15, 2025
REDHAT-BUG-2327931
CVSS 7.0high
Nov 21, 2024🔧 No Patch
CVE-2024-27834
CVSS 5.5medium
Apple Multiple Products Improper Authentication Vulnerability
May 13, 2024⚠ Exploited
CVE-2024-23254
CVSS 6.5medium
Mar 5, 2024
CVE-2024-23263
CVSS 8.1high
Mar 5, 2024
CVE-2024-23280
CVSS 7.5high
Mar 5, 2024
Monitor WebKitGTK in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.