CVE-2019-8720
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
- CVSS 3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-25)
- CISA KEV
- listed 2022-05-23, due 2022-06-13
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:codeready_linux_builder
- redhat:codeready_linux_builder_eus
- redhat:codeready_linux_builder_for_arm64_eus
- redhat:codeready_linux_builder_for_ibm_z_systems_eus
- redhat:codeready_linux_builder_for_power_little_endian_eus
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_for_arm64_eus
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_ibm_z_systems_eus
- redhat:enterprise_linux_for_power_big_endian
- redhat:enterprise_linux_for_power_little_endian
- redhat:enterprise_linux_for_power_little_endian_eus
- redhat:enterprise_linux_for_scientific_computing
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_server_update_services_for_sap_solutions
- redhat:enterprise_linux_workstation
- webkitgtk:webkitgtk
- wpewebkit:wpe_webkit