CVE-2019-8720

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code...

Basic Information

CVE State: PUBLISHED
Reserved Date: February 18, 2019
Published Date: March 06, 2023
Last Updated: January 28, 2025
Vendor: WebKit
Product: webkitgtk
Description: A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
Tags

CVSS Scores

CVSS v3.1

8.8 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2022-05-23 00:00:00 UTC) Source

References

https://bugzilla.redhat.com/show_bug.cgi?id=1876611 https://webkitgtk.org/security/WSA-2019-0005.html

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-05-23 00:00:00 UTC

Timeline

CVE ID Reserved

February 18, 2019
Added to KEVIntel

May 23, 2022
CVE Published to Public

March 06, 2023