CVE-2019-8720

Timeline

Detection, updates, and resolution for this record.

1. May 23, 2022 · Catalog

   Detected

   A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

2. May 23, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Jun 13, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Oct 8, 2026 · Catalog

   Updated

   A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Affected

• cpe redhat/codeready linux builder8.0
• cpe redhat/codeready linux builder eus8.4
• cpe redhat/codeready linux builder eus8.6
• cpe redhat/codeready linux builder for arm64 eus8.0
• cpe redhat/codeready linux builder for arm64 eus8.4
• cpe redhat/codeready linux builder for arm64 eus8.6
• cpe webkitgtk/webkitgtkversion unspecified
• cpe wpewebkit/wpe webkitversion unspecified
• vendor WebKitGTK WebKitGTKversion unspecified

Sources

• CISA KEVCVE-2019-8720

  WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

  cisa.gov
• CVE.orgCVE-2019-8720

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2019-8720

  30-day exploitation probability 1.6%

  first.org
• NIST NVDCVE-2019-8720

  A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

  nvd.nist.gov

References

• Issue Tracking · bugzilla.redhat.com
• CISA note · nvd.nist.gov
• Vendor Advisory · webkitgtk.org
• US Government Resource · cisa.gov