CVE Watch8 oct 2026

CVE-2019-8720

WebKitGTK Memory Corruption Vulnerability

CVSS

8.8

Alto

EPSS

1.6%

p75

KEV

SÍ

23 may 2022

Exploit Today

0-100

Publicado: 6 mar 2023 · Última mod.: 8 oct 2026 · CWE-119

EPSS · 30d

1.6%EPSS · 30 días1.6%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

WebKitGTK / WebKitGTK

Vulnerabilidad

WebKitGTK Memory Corruption Vulnerability

Añadido a KEV

23 may 2022

Remediar antes de

13 jun 2022

Uso conocido en ransomware

Descripción resumida

WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2019-8720

Descripción técnica

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-110920—

—

———Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4h CVE-2026-110918—

—

———Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)4h CVE-2026-110917—

—

———Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)4h CVE-2026-110914—

—

———Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)4h CVE-2026-110913—

—

———Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4h CVE-2026-454508.3 ALT

—

——0: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.7h