WebKit vulnerabilities
216 known CVE vulnerabilities in WebKit, translated and rated.
- CVE-2026-28859Medium
A vulnerability in Safari and related Apple system components allows a malicious website to process restricted web content outside the sandbox. The issue was addressed with improved memory handling.
- CVE-2026-28857Medium
A vulnerability in WebKit may lead to an unexpected process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling. The fix is included in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.
- CVE-2026-20664Medium
A vulnerability in WebKit may lead to an unexpected process crash when processing maliciously crafted web content. The issue was fixed by improving memory handling in Safari 26.4, iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.
- CVE-2023-43010High
A vulnerability in WebKit allows memory corruption when processing maliciously crafted web content. The issue was fixed by improving memory handling in Apple systems.
- CVE-2026-20652High
A vulnerability in Safari and Apple systems allows a remote attacker to cause a denial-of-service (DoS) via improper memory handling. The issue is fixed in updated versions of Safari, iOS, iPadOS, macOS Tahoe, and visionOS.
- CVE-2026-20644Medium
A vulnerability in Safari and Apple systems may cause a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.
- CVE-2026-20636Medium
A vulnerability in WebKit may cause a process crash when processing maliciously crafted web content. The issue was fixed with improved memory handling in Safari 26.3, iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, and visionOS 26.3.
- CVE-2026-20635Medium
A vulnerability in Safari and Apple systems allows unexpected process termination when processing maliciously crafted web content. The issue was fixed by improving memory handling.
- CVE-2026-20608Medium
A vulnerability in WebKit may cause a process crash when processing maliciously crafted web content. The issue was addressed through improved state management.
- CVE-2025-43511Medium
A use-after-free vulnerability in WebKit was fixed with improved memory management. The issue affects Safari and Apple systems before the specified updates.
- CVE-2025-43457Medium
A use-after-free vulnerability was fixed in Safari and other Apple products through improved memory management. The issue occurs when processing maliciously crafted web content.
- CVE-2025-43441Medium
A vulnerability in WebKit may cause a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.
- CVE-2025-43433High
A vulnerability in WebKit allows memory corruption when processing maliciously crafted web content. The issue was addressed with improved memory handling.
- CVE-2025-43214Medium
A vulnerability in WebKit allows Safari to crash when processing maliciously crafted web content. The issue was fixed by improving memory handling.
- CVE-2025-43213Medium
A vulnerability in WebKit may cause Safari to crash when processing maliciously crafted web content. The issue was fixed by improving memory handling.
- CVE-2025-31223High
A vulnerability in WebKit allows memory corruption when processing maliciously crafted web content. The issue was addressed with improved input validation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

