Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.5%	CVE-2025-66287WebKitGTK · Classic Buffer Overflow High8.8EPSS 0.5%2025-12-04CVE Database V5CVE-2025-66287 A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. EPSS 0.5%Vulnerability The WebKitGTK Team #cwe-120	CVE Database V5	2025-12-04
High	7.4	EPSS 0.3%	CVE-2025-13947webkitgtk · Origin Validation Error High7.4EPSS 0.3%2025-12-03CVE Database V5CVE-2025-13947 A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser. EPSS 0.3%Vulnerability The WebKitGTK Team #cwe-346	CVE Database V5	2025-12-03
High	7.5	EPSS 0.6%	CVE-2025-13502webkitgtk · Out-of-bounds Read High7.5EPSS 0.6%2025-11-25CVE Database V5CVE-2025-13502 A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server. EPSS 0.6%Vulnerability The WebKitGTK Team	CVE Database V5	2025-11-25

Showing 1–4 of 4 results · 1 duplicate CVE record merged