What is the CVSS score of CVE-2018-11646?

CVE-2018-11646 has a CVSS 3.0 base score of 7.5 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 69.0%.

Is there a public PoC exploit available for CVE-2018-11646?

Yes, a public proof-of-concept exploit is available for CVE-2018-11646. Prioritise patching immediately. EPSS: 69.0%.

Is there a patch available for CVE-2018-11646?

Yes, a patch is available for CVE-2018-11646. Update the affected software to the latest version immediately.

Webkitgtk CVE-2018-11646

HIGH

2018-06-01 cve@mitre.org

Denial Of Service Apple Webkitgtk

7.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Jun 01, 2018 - 13:29 nvd

HIGH 7.5

DescriptionNVD

AnalysisAI

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash. Affected products include: Webkitgtk Webkitgtk\+. Version information: through 2.21.3.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Webkitgtk

View all

CVE-2018-4162 HIGH Act Now POC

8.8 Apr 03

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2017-2363 MEDIUM This Month POC

6.5 Feb 20

An issue was discovered in certain Apple products. Rated medium severity (CVSS 6.5), this vulnerability is remotely expl

CVE-2017-2373 HIGH This Week POC

8.8 Feb 20

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2017-2365 MEDIUM This Month POC

6.5 Feb 20

An issue was discovered in certain Apple products. Rated medium severity (CVSS 6.5), this vulnerability is remotely expl

CVE-2019-8375 CRITICAL Act Now POC

9.8 Feb 24

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products

CVE-2017-2369 HIGH This Week POC

8.8 Feb 20

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2021-21806 HIGH This Week POC

8.8 Jul 08

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. Rated high severity (CVSS 8.

CVE-2021-21779 HIGH This Week POC

8.8 Jul 08

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. Ra

CVE-2020-13584 HIGH This Week POC

8.8 Dec 03

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. Rated high severity (CVSS 8.

CVE-2020-13543 HIGH This Week POC

8.8 Dec 03

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. Rated high severity (CV

CVE-2018-12293 HIGH This Week POC

8.8 Jun 19

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKi

CVE-2017-2360 HIGH This Week POC

7.8 Feb 20

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authenticati

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

CVE-2018-11646 vulnerability details – vuln.today

Back

Webkitgtk CVE-2018-11646

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Webkitgtk

Same technique Denial Of Service

Share

External POC / Exploit Code