VULNERABILITY INTELLIGENCE

CVE-2019-8720

CVSS score8.8 HIGH

EPSS probability1.56%

CISA KEVKnown exploited vulnerability

Published2023-03-06

Last modified2026-10-08

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

WebKitGTK Memory Corruption Vulnerability

Vendor / product: WebKitGTK / WebKitGTK

Description

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Weakness classification

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

secalert@redhat.com — Issue Tracking, Third Party Advisory
secalert@redhat.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource