Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-z3sj-wt9b-bbf2
Vulnerability ID VCID-z3sj-wt9b-bbf2
Aliases CVE-2017-2442
Summary Multiple vulnerabilities have been found in WebKitGTK+, the worst of which allows remote attackers to execute arbitrary code.
Status Published
Exploitability 2.0
Weighted Severity 0.1
Risk 0.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.12422 https://api.first.org/data/v1/epss?cve=CVE-2017-2442
epss 0.12422 https://api.first.org/data/v1/epss?cve=CVE-2017-2442
epss 0.12422 https://api.first.org/data/v1/epss?cve=CVE-2017-2442
epss 0.12422 https://api.first.org/data/v1/epss?cve=CVE-2017-2442
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2017-2442
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2442
CVE-2017-2442 Exploit https://bugs.chromium.org/p/project-zero/issues/detail?id=1068
CVE-2017-2442 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/41800.html
GLSA-201706-15 https://security.gentoo.org/glsa/201706-15
USN-3257-1 https://usn.ubuntu.com/3257-1/
Data source Exploit-DB
Date added April 4, 2017
Description Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting
Ransomware campaign use Known
Source publication date April 4, 2017
Exploit type webapps
Platform multiple
Source update date April 4, 2017
Source URL https://bugs.chromium.org/p/project-zero/issues/detail?id=1068
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.94061
EPSS Score 0.12422
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:50:14.324985+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201706-15 38.6.0