Known vulnerabilities in webkit2gtk (Debian package) 2.26.3-1~bpo9+1

Vendor: Debian
Version: 2.26.3-1~bpo9+1
Software CPE: cpe:2.3:o:debian:webkit2gtk_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 14
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting webkit2gtk (Debian package) version 2.26.3-1~bpo9+1 webkit2gtk (Debian package) 2.26.3-1~bpo9+1 is affected by 14 vulnerabilities: 7 high, 4 medium, 3 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26432 - Business Logic Errors (3.0)
CVE-2020-3885
CWE-840 Low
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 8 more
#VU26431 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3902
CWE-79 Low
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 10 more
#VU26430 - Memory corruption
CVE-2020-3899
CWE-119 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032719
SB2020042823
and 12 more
#VU26428 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3894
CWE-362 Medium
Public exploit available
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032719
SB2020051104
and 8 more
#VU26427 - Memory corruption
CVE-2020-3900
CWE-119 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26426 - Memory corruption
CVE-2020-3895
CWE-119 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26424 - Type confusion
CVE-2020-3901
CWE-843 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26422 - Type confusion
CVE-2020-3897
CWE-843 High
No
No
2.28.2-2~deb10u1 27.03.2020 SB2020032715
SB2020032718
SB2020032719
and 9 more
#VU26076 - Use After Free
CVE-2020-10018
CWE-416 High
No
No
2.26.4-1~deb10u2 13.03.2020 SB2020031317
SB2020031318
SB2020031709
and 14 more
#VU25382 - Memory corruption
CVE-2020-3868
CWE-119 High
No
No
2.26.4-1~deb10u1 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3867
CWE-79 Medium
No
No
2.26.4-1~deb10u1 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25380 - Origin Validation Error
CVE-2020-3865
CWE-346 Medium
No
No
2.26.4-1~deb10u1 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25379 - Origin Validation Error
CVE-2020-3864
CWE-346 Medium
No
No
2.26.4-1~deb10u1 15.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more
#VU25375 - Memory corruption
CVE-2020-3862
CWE-119 Low
No
No
2.26.4-1~deb10u1 14.02.2020 SB2020021501
SB2020021717
SB2020021808
and 8 more