CVE-2019-8720
high · 8.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-05-23Remediation due 2022-06-13
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
8.8
CVSS
1.6%
EPSS (exploit prob.)
74th
EPSS percentile
2023-03-06
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| webkitgtk | webkitgtk | < 2.26.0 |
| wpewebkit | wpe_webkit | < 2.26.0 |
| redhat | codeready_linux_builder | 8.0 |
| redhat | codeready_linux_builder_eus | 8.4 |
| redhat | codeready_linux_builder_eus | 8.6 |
| redhat | codeready_linux_builder_for_arm64_eus | 8.0 |
| redhat | codeready_linux_builder_for_arm64_eus | 8.4 |
| redhat | codeready_linux_builder_for_arm64_eus | 8.6 |
| redhat | codeready_linux_builder_for_ibm_z_systems_eus | 8.0 |
| redhat | codeready_linux_builder_for_ibm_z_systems_eus | 8.4 |
| redhat | codeready_linux_builder_for_ibm_z_systems_eus | 8.6 |
| redhat | codeready_linux_builder_for_power_little_endian_eus | 8.0 |
| redhat | codeready_linux_builder_for_power_little_endian_eus | 8.4 |
| redhat | codeready_linux_builder_for_power_little_endian_eus | 8.6 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_eus | 8.4 |
| redhat | enterprise_linux_eus | 8.4 |
| redhat | enterprise_linux_eus | 8.6 |
| redhat | enterprise_linux_eus | 8.6 |
| redhat | enterprise_linux_for_arm64_eus | 8.6 |
| redhat | enterprise_linux_for_ibm_z_systems | 7.0 |
| redhat | enterprise_linux_for_ibm_z_systems | 8.0 |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.4 |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.6 |
| redhat | enterprise_linux_for_power_big_endian | 7.0 |
| redhat | enterprise_linux_for_power_little_endian | 7.0 |
| redhat | enterprise_linux_for_power_little_endian | 8.0 |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.4 |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.6 |
| redhat | enterprise_linux_for_scientific_computing | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_aus | 8.4 |
| redhat | enterprise_linux_server_aus | 8.6 |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 8.4 |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 8.6 |
| redhat | enterprise_linux_server_tus | 8.4 |
| redhat | enterprise_linux_server_tus | 8.6 |
| redhat | enterprise_linux_server_update_services_for_sap_solutions | 8.4 |
| redhat | enterprise_linux_server_update_services_for_sap_solutions | 8.6 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-8720