Known vulnerabilities in webkit2gtk (Debian package) 2.16.3-2~bpo8+1

Vendor: Debian
Version: 2.16.3-2~bpo8+1
Software CPE: cpe:2.3:o:debian:webkit2gtk_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting webkit2gtk (Debian package) version 2.16.3-2~bpo8+1 webkit2gtk (Debian package) 2.16.3-2~bpo8+1 is affected by 8 vulnerabilities: 5 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26432 - Business Logic Errors (3.0)
CVE-2020-3885
CWE-840 Low
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 8 more
#VU26431 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3902
CWE-79 Low
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 10 more
#VU26430 - Memory corruption
CVE-2020-3899
CWE-119 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032719
SB2020042823
and 12 more
#VU26428 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3894
CWE-362 Medium
Public exploit available
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 8 more
#VU26427 - Memory corruption
CVE-2020-3900
CWE-119 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26426 - Memory corruption
CVE-2020-3895
CWE-119 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26424 - Type confusion
CVE-2020-3901
CWE-843 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26422 - Type confusion
CVE-2020-3897
CWE-843 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more