May 23, 2022 · Applied Cybernetics Group
CVE-2019-8720 WebKitGTK WebKitGTK
WebKitGTK Memory Corruption Vulnerability
- Added to KEV
2022-05-23- Federal due date
2022-06-13- Vendor
- WebKitGTK
- Product
- WebKitGTK
- EPSS
- 75.3th percentile (score 0.016, as of
2026-11-06) - NVD CVSS v3.1
- 8.8 (HIGH)
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2019-8720
CISA short description
WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.
Required action
Apply updates per vendor instructions.
NVD description
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.