How many CVEs does WebKitGTK+ have?

WebKitGTK+ has 133 published CVE records since 2010, including 4 in the last two years.

How many WebKitGTK+ CVEs are in CISA KEV?

Yes — 15 of WebKitGTK+'s CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which WebKitGTK+ products have the most CVEs?

The WebKitGTK+ products with the most published CVEs are webkitgtk, WebKitGTK+, webkit2gtk3.

What are the most common weakness types in WebKitGTK+ CVEs?

WebKitGTK+'s CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-20 (Improper Input Validation).

Are there public exploits for WebKitGTK+ vulnerabilities?

Yes — 36 of WebKitGTK+'s CVEs have a known public exploit.

How many critical WebKitGTK+ vulnerabilities are there?

WebKitGTK+ has 22 critical and 74 high-severity CVEs.

What is the average severity of WebKitGTK+ CVEs?

The average CVSS base score across WebKitGTK+'s scored CVEs is 8.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

133 CVEs

15 in CISA KEV

WebKitGTK+ Vulnerabilities

Name: WebKitGTK+ vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WebKitGTK+.

133

Total CVEs

Published

15

In CISA KEV

Exploited in the wild

36

Public exploits

PoC or exploit code

8.0

Avg CVSS

2010–2025

Overview

WebKitGTK+ has 133 published CVE records since 2010, of which 15 are in CISA's Known Exploited Vulnerabilities catalog and 36 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WebKitGTK+ products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on WebKitGTK+'s vulnerability posture, as a share of its 133 published CVEs.

Average CVSS: 8.0
Critical / high: 72%
Actively exploited (KEV): 11%
Public exploit available: 27%
Patch available: 98%

Severity and exploitation

How the CVSS severity of WebKitGTK+'s CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical22

High74

Medium35

Low2

In CISA’s Known Exploited Vulnerabilities catalog

15

15 of WebKitGTK+'s CVEs are confirmed exploited in the wild.

Public exploits

36

36 of WebKitGTK+'s CVEs have a known public exploit available.

Most affected products

The WebKitGTK+ products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in WebKitGTK+ CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish WebKitGTK+ CVE records.

Disclosure activity by year

How many WebKitGTK+ CVEs were published each year.

2018

22

2019

14

2020

9

2021

15

2022

4

2023

19

2024

7

2025

4

Latest WebKitGTK+ CVEs

The most recently disclosed vulnerabilities affecting WebKitGTK+.

Critical vulnerability · 2025-09-15
CWE-119
Critical · CVSS 9.8
EPSS 0.7%2025-09-15
Critical vulnerability · 2025-09-15
CWE-20
Critical · CVSS 9.8
EPSS 0.7%2025-09-15
Critical vulnerability · 2025-07-29
CISA KEV
CWE-119
Critical · CVSS 9.4
EPSS 1.5%2025-07-29
Critical vulnerability · 2025-07-15
CISA KEV
Critical · CVSS 9.4
EPSS 9.0%2025-07-15
High vulnerability · 2024-05-13
CWE-277
High · CVSS 8.1
EPSS 0.6%2024-05-13
High vulnerability · 2024-03-08
CWE-20
High · CVSS 8.1
EPSS 1.5%2024-03-08
High vulnerability · 2024-03-08
High · CVSS 7.5
EPSS 1.3%2024-03-08
Medium vulnerability · 2024-03-08
Medium · CVSS 6.5
EPSS 1.3%2024-03-08
Medium vulnerability · 2024-03-08
CWE-693
Medium · CVSS 6.5
EPSS 1.5%2024-03-08
High vulnerability · 2024-03-08
CWE-20
High · CVSS 8.6
EPSS 0.7%2024-03-08
High vulnerability · 2024-02-21
CWE-290
High · CVSS 7.5
EPSS 0.9%2024-02-21
High vulnerability · 2023-11-30
CISA KEV
CWE-787
High · CVSS 8.7
EPSS 9.4%2023-11-30

Track new WebKitGTK+ CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor WebKitGTK+ CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

kubernetes135 CVEs Open WebUI135 CVEs Centreon134 CVEs thimpress133 CVEs Brocade132 CVEs Motorola132 CVEs ManageEngine132 CVEs Puppet132 CVEs

Browse all vendors

Frequently asked questions

Common questions about WebKitGTK+ vulnerabilities.

How many CVEs does WebKitGTK+ have?: WebKitGTK+ has 133 published CVE records since 2010, including 4 in the last two years.
How many WebKitGTK+ CVEs are in CISA KEV?: Yes — 15 of WebKitGTK+'s CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which WebKitGTK+ products have the most CVEs?: The WebKitGTK+ products with the most published CVEs are webkitgtk, WebKitGTK+, webkit2gtk3.
What are the most common weakness types in WebKitGTK+ CVEs?: WebKitGTK+'s CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-20 (Improper Input Validation).
Are there public exploits for WebKitGTK+ vulnerabilities?: Yes — 36 of WebKitGTK+'s CVEs have a known public exploit.
How many critical WebKitGTK+ vulnerabilities are there?: WebKitGTK+ has 22 critical and 74 high-severity CVEs.
What is the average severity of WebKitGTK+ CVEs?: The average CVSS base score across WebKitGTK+'s scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WebKitGTK+ vulnerabilities

Monitor new WebKitGTK+ vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing