CVE WatchOct 8, 2026

CVE-2019-8720

WebKitGTK Memory Corruption Vulnerability

CVSS

8.8

High

EPSS

1.6%

p75

KEV

YES

May 23, 2022

Exploit Today

0-100

Published: Mar 6, 2023 · Last modified: Oct 8, 2026 · CWE-119

EPSS · 30d

1.6%EPSS · 30 days1.6%

2026-09-172026-10-15

KEV catalog record

Product

WebKitGTK / WebKitGTK

Vulnerability

WebKitGTK Memory Corruption Vulnerability

Added to KEV

May 23, 2022

Remediate by

Jun 13, 2022

Known ransomware use

Summary description

WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-8720

Technical description

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-110920—

—

———Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9h CVE-2026-110918—

—

———Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)9h CVE-2026-110917—

—

———Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)9h CVE-2026-110914—

—

———Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)9h CVE-2026-110913—

—

———Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9h CVE-2026-454508.3 HIG

—

——0: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.12h