Vulnerability Intelligence Report
WebKitGTK Memory Corruption Vulnerability
CVE-2019-8720
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
CISA KEV
SSVC: Active Exploitation
Memory Corruption
CVSS Base Score
8.8
HIGH
Exploitability:2.9
Impact Score:5.9
EPSS Probability:1.56%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-119 ↗CWE-119
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| n/a | webkitgtk | Fixed in webkitgtk 2.26.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
CISA KEV
ACTIVE IN CATALOG
EPSS Score
1.556%
GitHub Advisory
Vulnerability Class
Memory Corruption
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2019-02-18T00:00:00 |
| Published | 2023-03-06T00:00:00 |
| Last Updated | 2026-10-07T17:29:07 |
Community Chatter & Buzz