Webrtc Project Webrtc — known CVE vulnerabilities

Every CVE whose affected-product data names Webrtc Project Webrtc, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-2294 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2016-1975 — CVSS 6.3 (medium): Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on…
• CVE-2016-1976 — CVSS 5.5 (medium): Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might…
• CVE-2021-28681 — CVSS 5.3 (medium): Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was…