HIGH

CVE-2019-8720

Redhat Codeready Linux Builder 2023-03-06 CVSS v3.1

CVSS

8.8

KEV

Description

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Summary dbcve.org

Memory corruption vulnerability in WebKit that allows arbitrary code execution when processing maliciously crafted web content. The flaw stems from improper memory handling during web content processing.

Mitigation

Apply vendor-supplied updates to WebKit-based products (browsers, applications). Keep Safari and all WebKit-dependent applications updated to the latest patched versions.

Weakness (CWE)

CWE-119 Memory Buffer Bounds Error

EPSS Score

1.56%

Probability of exploitation in next 30 days

74.1th percentile

References

https://bugzilla.redhat.com/show_bug.cgi?id=1876611 Issue Tracking, Third Party Advisory https://webkitgtk.org/security/WSA-2019-0005.html Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8720 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE