Open Source WebKitGTK

Name: Open Source WebKitGTK
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

7critical20high10medium1low

updated 2026-10-26

vulnerabilities (322)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-6558US	—OT critical	10.9% (96th)	KEV	2.48.0	2025-07-15	3 versions
CVE-2025-24201US	critical10.0OT critical	3.85% (90th)	KEV	2.46.7	2025-03-11	2 versions
CVE-2026-3909US	high8.8OT critical	2.34% (84th)	KEV	2.54.0	2026-03-13	< 2.54.0
CVE-2025-31277US	—OT critical	1.66% (76th)	KEV	2.50.0	2025-07-30	2 versions
CVE-2023-43000US	high8.8OT critical	4.04% (91st)	KEV	2.50.2	2025-11-05	2 versions
CVE-2024-4367US	high8.8	70.7% (99th)	Exploit	2.52.5	2024-05-14	< 2.52.5
CVE-2025-9478US	—	7.27% (94th)	Exploit	2.54.0	2025-08-26	< 2.54.0
CVE-2024-7966US	high8.8	0.71% (53rd)	Exploit	2.54.0	2024-08-21	< 2.54.0
CVE-2024-8636US	high8.8	0.65% (50th)	Exploit	2.54.0	2024-09-11	< 2.54.0
CVE-2024-8198US	high8.8	0.61% (49th)	Exploit	2.54.0	2024-08-28	< 2.54.0
CVE-2024-8193US	high8.8	0.59% (48th)	Exploit	2.54.0	2024-08-28	< 2.54.0
CVE-2026-65351US	—	0.46% (39th)	Exploit	2.54.0	2026-08-17	< 2.54.0
CVE-2025-13947US	—	0.33% (25th)	Exploit	2.50.3	2025-12-03	< 2.50.3
CVE-2026-11113US	critical9.6	0.29% (21st)	Exploit	2.54.0	2026-06-04	< 2.54.0
CVE-2026-14382US	—	0.28% (19th)	Exploit	2.54.0	2026-07-01	< 2.54.0
CVE-2026-11104US	—	0.27% (19th)	Exploit	2.54.0	2026-06-04	< 2.54.0
CVE-2026-11110US	—	0.26% (17th)	Exploit	2.54.0	2026-06-04	< 2.54.0
CVE-2026-11109US	—	0.26% (17th)	Exploit	2.54.0	2026-06-04	< 2.54.0
CVE-2026-11111US	—	0.24% (14th)	Exploit	2.54.0	2026-06-04	< 2.54.0
CVE-2026-9998US	—	0.18% (7th)	Exploit	2.54.0	2026-05-28	< 2.54.0
CVE-2024-1283US	critical9.8	21.6% (98th)	—	2.54.0	2024-02-07	< 2.54.0
CVE-2024-54502US	medium6.5	17.1% (97th)	—	2.46.5	2024-12-12	< 2.46.5
CVE-2024-54479US	high7.5	1.58% (75th)	—	2.46.5	2024-12-12	< 2.46.5
CVE-2026-43715US	—	1.26% (69th)	—	2.52.5	2026-06-29	< 2.52.5
CVE-2025-43227US	—	1.20% (68th)	—	2.48.0	2025-07-30	2 versions
CVE-2025-31278US	—	1.19% (68th)	—	2.48.0	2025-07-30	2 versions
CVE-2025-31273US	—	1.09% (65th)	—	2.48.0	2025-07-30	2 versions
CVE-2024-54505US	high8.8	1.07% (65th)	—	2.46.5	2024-12-12	< 2.46.5
CVE-2025-43216US	—	1.06% (64th)	—	2.48.0	2025-07-30	2 versions
CVE-2025-43214US	—	1.05% (64th)	—	2.50.5	2025-07-30	3 versions
CVE-2025-43212US	—	1.01% (63rd)	—	2.48.5	2025-07-30	2 versions
CVE-2025-43240US	—	1.01% (63rd)	—	2.48.5	2025-07-30	2 versions
CVE-2025-31206US	—	1.00% (63rd)	—	2.48.2	2025-05-12	2 versions
CVE-2024-54508US	high7.5	0.97% (61st)	—	2.46.5	2024-12-12	< 2.46.5
CVE-2023-43010US	—	0.92% (60th)	—	2.44.0	2026-03-12	< 2.44.0
CVE-2026-43725US	—	0.91% (60th)	—	2.52.5	2026-06-29	< 2.52.5
CVE-2025-43228US	—	0.89% (59th)	—	2.48.5	2025-07-30	2 versions
CVE-2024-54543US	high8.8	0.81% (56th)	—	2.46.5	2025-01-27	4 versions
CVE-2026-3538US	high8.8	0.80% (56th)	—	2.54.0	2026-03-04	< 2.54.0
CVE-2025-43213US	—	0.75% (54th)	—	2.44.0	2025-07-30	3 versions
CVE-2025-24189US	—	0.74% (54th)	—	2.48.0	2025-05-19	< 2.48.0
CVE-2026-3536US	high8.8	0.72% (53rd)	—	2.54.0	2026-03-04	< 2.54.0
CVE-2024-43091US	critical9.8	0.71% (53rd)	—	2.54.0	2024-11-13	< 2.54.0
CVE-2026-43707US	—	0.69% (52nd)	—	2.52.5	2026-06-29	< 2.52.5
CVE-2026-43745US	—	0.68% (52nd)	—	2.52.5	2026-06-29	< 2.52.5
CVE-2025-31204US	—	0.68% (52nd)	—	2.42.0	2025-05-12	2 versions
CVE-2026-43720US	—	0.66% (51st)	—	2.52.5	2026-06-29	< 2.52.5
CVE-2025-31215US	—	0.65% (51st)	—	2.48.2	2025-05-12	2 versions
CVE-2024-54551US	—	0.65% (50th)	—	2.48.1	2025-03-21	< 2.48.1
CVE-2026-10883US	—	0.63% (50th)	—	2.54.0	2026-06-04	< 2.54.0

showing 50 of 322

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free63 CVEs
CWE-787Out-of-bounds Write44 CVEs
CWE-125Out-of-bounds Read38 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer37 CVEs
CWE-20Improper Input Validation33 CVEs
CWE-457Use of Uninitialized Variable33 CVEs
CWE-122Heap-based Buffer Overflow20 CVEs
CWE-472External Control of Assumed-Immutable Web Parameter18 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)322 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan