Lucene search
HistoryMar 06, 2023 - 11:15 p.m.
CVE-2019-8720
cve-2019-8720
webkit
memory corruption
code execution
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.007
Percentile
80.3%
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
Affected configurations
Node
webkitgtkwebkitgtkRange<2.26.0
ORwpewebkitwpe_webkitRange<2.26.0
Node
redhatcodeready_linux_builderMatch8.0
ORredhatcodeready_linux_builder_eusMatch8.4
ORredhatcodeready_linux_builder_eusMatch8.6
ORredhatcodeready_linux_builder_for_arm64_eusMatch8.0
ORredhatcodeready_linux_builder_for_arm64_eusMatch8.4
ORredhatcodeready_linux_builder_for_arm64_eusMatch8.6
ORredhatcodeready_linux_builder_for_ibm_z_systems_eusMatch8.0
ORredhatcodeready_linux_builder_for_ibm_z_systems_eusMatch8.4
ORredhatcodeready_linux_builder_for_ibm_z_systems_eusMatch8.6
ORredhatcodeready_linux_builder_for_power_little_endian_eusMatch8.0
ORredhatcodeready_linux_builder_for_power_little_endian_eusMatch8.4
ORredhatcodeready_linux_builder_for_power_little_endian_eusMatch8.6
ORredhatenterprise_linuxMatch8.0-
ORredhatenterprise_linux_desktopMatch7.0
ORredhatenterprise_linux_eusMatch8.4
ORredhatenterprise_linux_eusMatch8.6
ORredhatenterprise_linux_for_arm64Match8.0
ORredhatenterprise_linux_for_arm64_eusMatch8.4
ORredhatenterprise_linux_for_arm64_eusMatch8.6
ORredhatenterprise_linux_for_ibm_z_systemsMatch7.0
ORredhatenterprise_linux_for_ibm_z_systemsMatch8.0
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.4
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.6
ORredhatenterprise_linux_for_power_big_endianMatch7.0
ORredhatenterprise_linux_for_power_little_endianMatch7.0
ORredhatenterprise_linux_for_power_little_endianMatch8.0
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.4
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.6
ORredhatenterprise_linux_for_scientific_computingMatch7.0
ORredhatenterprise_linux_serverMatch7.0
ORredhatenterprise_linux_server_ausMatch8.4
ORredhatenterprise_linux_server_ausMatch8.6
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.4
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.6
ORredhatenterprise_linux_server_tusMatch8.4
ORredhatenterprise_linux_server_tusMatch8.6
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.4
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.6
ORredhatenterprise_linux_workstationMatch7.0
Related
cisa_kev
cisa_kev
WebKitGTK Memory Corruption Vulnerability
2022-05-23 00:00:00
redhatcve
redhatcve
CVE-2019-8720
2020-09-07 17:49:08
symantec
symantec
WebKit CVE-2019-8720 Memory Corruption Vulnerability
2019-10-07 00:00:00
cve
cve
CVE-2019-8720
2023-03-06 23:15:10
prion
prion
Memory corruption
2023-03-06 23:15:00
attackerkb
attackerkb
CVE-2019-8720
2023-03-06 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-10-01 03:52:48
alpinelinux
alpinelinux
CVE-2019-8720
2023-03-06 23:15:10
ubuntucve
ubuntucve
CVE-2019-8720
2019-11-01 00:00:00
cvelist
cvelist
CVE-2019-8720
2023-03-06 00:00:00
debiancve
debiancve
CVE-2019-8720
2023-03-06 23:15:10
osv
osv
CVE-2019-8720
2023-03-06 23:15:10
webkit2gtk - security update
2019-11-04 00:00:00
Moderate: GNOME security, bug fix, and enhancement update
2020-11-03 12:05:56
openvas
openvas
Ubuntu: Security Advisory (USN-4178-1)
2019-11-08 00:00:00
Fedora Update for webkit2gtk3 FEDORA-2019-99db7a510e
2019-11-04 00:00:00
Apple iTunes Security Updates (HT210635)
2019-10-10 00:00:00
nessus
nessus
Debian DSA-4558-1 : webkit2gtk - security update
2019-11-06 00:00:00
Ubuntu 18.04 LTS : WebKitGTK+ vulnerabilities (USN-4178-1)
2019-11-08 00:00:00
Fedora 30 : webkit2gtk3 (2019-99db7a510e)
2019-11-04 00:00:00
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2019-11-07 00:00:00
debian
debian
[SECURITY] [DSA 4558-1] webkit2gtk security update
2019-11-04 22:06:37
fedora
fedora
[SECURITY] Fedora 30 Update: webkit2gtk3-2.26.1-3.fc30
2019-11-03 00:14:07
kaspersky
kaspersky
KLA11580 Multiple vulnerabilities in Apple iTunes
2019-09-07 00:00:00
freebsd
freebsd
webkit2-gtk3 -- Multiple vulnerabilities
2019-10-29 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2019-11-14 19:58:51
gentoo
gentoo
WebkitGTK+: Multiple vulnerabilities
2020-03-15 00:00:00
suse
suse
Security update for webkit2gtk3 (important)
2019-11-30 00:00:00
Security update for webkit2gtk3 (important)
2019-11-30 00:00:00
oraclelinux
oraclelinux
GNOME security, bug fix, and enhancement update
2020-11-10 00:00:00
webkitgtk4 security, bug fix, and enhancement update
2020-10-06 00:00:00
almalinux
almalinux
Moderate: GNOME security, bug fix, and enhancement update
2020-11-03 12:05:56
redhat
redhat
rocky
rocky
GNOME security, bug fix, and enhancement update
2020-11-03 12:05:56
amazon
amazon
Medium: webkitgtk4
2020-11-09 21:05:00
centos
centos
webkitgtk4 security update
2020-10-20 19:07:36
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.007
Percentile
80.3%
Related for NVD:CVE-2019-8720