返回 CVE 浏览器

CVE-2019-8720

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score62.7410%

EPSS Percentile89.43th

Published2023-03-06

Last Modified2026-06-17

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Affected Platforms (CPE)

📦

Webkitgtk

Webkitgtk

< 2.26.0

📦

Wpewebkit

Wpe Webkit

< 2.26.0

📦

Redhat

Codeready Linux Builder

= 8.0

📦

Redhat

Codeready Linux Builder Eus

= 8.4= 8.6

References & Advisories

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1876611

🔗 https://webkitgtk.org/security/WSA-2019-0005.html

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1876611

🔗 https://webkitgtk.org/security/WSA-2019-0005.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8720

相关漏洞威胁

CVE-2025-662878.8

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handl...

CVE-2025-139477.4

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the...

CVE-2025-135027.5

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a ...

CVE-2023-399288.8

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse ...

CVE-2019-8720 Detail & Impact Analysis | CVSS 8.8 (HIGH) | Cyber-Sec.Space | Cyber-Sec.Space