Lucene search

K
osvGoogleOSV:USN-4648-1
HistoryNov 26, 2020 - 1:07 p.m.

webkit2gtk vulnerabilities

2020-11-2613:07:57
Google
osv.dev
13
webkitgtk
web security
javascript engine
cross-site scripting
denial of service
arbitrary code execution

AI Score

7.1

Confidence

High

EPSS

0.005

Percentile

76.4%

A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.