Loading vulnerability…
WebKitGTK and WPE WebKit Memory Corruption Remote Code Execution
CVE-2019-8720 is a set of memory-corruption vulnerabilities in WebKitGTK and WPE WebKit before version 2.26.0. Processing maliciously crafted web content can trigger the flaws and result in arbitrary code execution. The vulnerabilities were corrected through improved memory handling.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation may provide arbitrary code execution in the context of the affected WebKit process or application. The CVSS v3.1 vector indicates high confidentiality, integrity, and availability impact. The vulnerability has been included in CISA's Known Exploited Vulnerabilities Catalog and has been associated with BitPaymer ransomware exploitation.
If you can’t patch tonight, do this now.
No practical mitigation beyond promptly updating affected packages has been identified. Where patching cannot occur immediately, reduce exposure to untrusted web content in applications embedding affected WebKit components.
Patch, then assume compromise.
Update WebKitGTK and WPE WebKit to version 2.26.0 or later. Apply vendor-supported distribution security updates; Red Hat addressed affected RHEL 7 WebKitGTK 4 packages in RHSA-2020:4035 and affected RHEL 8 WebKitGTK packages in RHSA-2020:4451. RHEL 6 is outside support scope, and the RHEL 7 webkitgtk3 package is designated will not fix.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.