CVE-2019-8720

WebKitGTK Memory Corruption Vulnerability

Exploited in attacks High 8.8 Attack chance: 1.6%

What it is

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

CISA: WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: June 13, 2022

Added to the CISA list: May 23, 2022
Published: March 6, 2023
Severity: High 8.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 1.6% in the top 25.0% of all known vulnerabilities
Weakness: CWE-119
More details: NVD · CVE.org · CISA

All references (2)

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.