CVE Feed

    Dashboard / CVE / CVE-2019-8720

    CVE-2019-8720

    A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

    Published:Oct 29, 2019
    Last Modified:Nov 18, 2025
    EPS:Mar 6, 2023
    EPSS Score:0.05095
    CVSS Score:8.8

    CISA Notification

    Description

    A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    Jun 13, 2022
    1551 days ago
    Alert Date
    May 23, 2022
    1572 days ago

    Affected Products

    Vendor
    Redhat
    Product
    Codeready Linux Builder
    Vendor
    Redhat
    Product
    Codeready Linux Builder Eus
    Vendor
    Redhat
    Product
    Codeready Linux Builder For Arm64 Eus
    Vendor
    Redhat
    Product
    Codeready Linux Builder For Ibm Z Systems Eus
    Vendor
    Redhat
    Product
    Codeready Linux Builder For Power Little Endian Eus
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Arm64 Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Big Endian
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Scientific Computing
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Update Services For Sap Solutions
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation
    Vendor
    Webkitgtk
    Product
    Webkitgtk
    Vendor
    Wpewebkit
    Product
    Wpe Webkit

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-13601 (CVSS 7.7) — A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the …
    CVE-2025-3155 (CVSS 7.4) — A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary script…
    CVE-2025-2784 (CVSS 7) — A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via th…
    CVE-2023-3758 (CVSS 7.1) — A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated use…
    CVE-2024-1488 (CVSS 8) — A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the un…
    CVE-2023-5455 (CVSS 6.5) — A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of I…
    CVE-2024-0193 (CVSS 7.8) — A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is gar…
    CVE-2023-4911 (CVSS 7.8) — A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABL…
    CVE-2023-5633 (CVSS 7.8) — The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-fr…
    CVE-2023-4732 (CVSS 4.7) — A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High