CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 4:40 PM ET)

What this means for you

This week: 3,239 CVEs published, 241 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,239; Show in the list
Critical, last 7 days: 241; Show in the list
Healthcare-tagged, last 7 days: 6; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product webkitgtk:webkitgtk+. Show all products

7 CVEs

Showing 1 to 7.

CVE	Severity	Title	Published
CVE-2023-42917 Known exploited	High 8.8	A memory corruption vulnerability was addressed with improved locking. Assigned by apple	Nov 30, 2023
CVE-2023-42916 Known exploited	Medium 6.5	An out-of-bounds read was addressed with improved input validation. Assigned by apple	Nov 30, 2023
CVE-2023-41993 Known exploited	High 8.8	The issue was addressed with improved checks. Assigned by apple	Sep 21, 2023
CVE-2023-37450 Known exploited	High 8.8	The issue was addressed with improved checks. Assigned by apple	Jul 26, 2023
CVE-2023-32439 Known exploited	High 8.8	A type confusion issue was addressed with improved checks. Assigned by apple	Jun 22, 2023
CVE-2023-32373 Known exploited	High 8.8	A use-after-free issue was addressed with improved memory management. Assigned by apple	Jun 22, 2023
CVE-2023-28204 Known exploited	Medium 6.5	An out-of-bounds read was addressed with improved input validation. Assigned by apple	Jun 22, 2023

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.