CVE-2019-8720: webkitgtk before 2.26.0 (exclusive), Fixed in webkitgtk 2.26.0; +22 more affected products

Affected technology

webkitgtk · before 2.26.0 (exclusive)
webkitgtk

wpe webkit · before 2.26.0 (exclusive)
wpewebkit

codeready linux builder · 8.0
redhat

codeready linux builder eus · 8.4
redhat

codeready linux builder eus · 8.6
redhat

codeready linux builder for arm64 eus · 8.0
redhat

codeready linux builder for arm64 eus · 8.4
redhat

codeready linux builder for arm64 eus · 8.6
redhat

codeready linux builder for ibm z systems eus · 8.0
redhat

codeready linux builder for ibm z systems eus · 8.4
redhat

codeready linux builder for ibm z systems eus · 8.6
redhat

codeready linux builder for power little endian eus · 8.0
redhat

codeready linux builder for power little endian eus · 8.4
redhat

codeready linux builder for power little endian eus · 8.6
redhat

enterprise linux · 8.0
redhat

enterprise linux desktop · 7.0
redhat

enterprise linux eus · 8.4
redhat

enterprise linux eus · 8.6
redhat

enterprise linux for arm64 eus · 8.6
redhat

enterprise linux for ibm z systems · 7.0
redhat

enterprise linux for ibm z systems · 8.0
redhat

enterprise linux for ibm z systems eus · 8.4
redhat

enterprise linux for ibm z systems eus · 8.6
redhat

enterprise linux for power big endian · 7.0
redhat

enterprise linux for power little endian · 7.0
redhat

enterprise linux for power little endian · 8.0
redhat

enterprise linux for power little endian eus · 8.4
redhat

enterprise linux for power little endian eus · 8.6
redhat

enterprise linux for scientific computing · 7.0
redhat

enterprise linux server · 7.0
redhat

enterprise linux server aus · 8.4
redhat

enterprise linux server aus · 8.6
redhat

enterprise linux server for power little endian update services for sap solutions · 8.4
redhat

enterprise linux server for power little endian update services for sap solutions · 8.6
redhat

enterprise linux server tus · 8.4
redhat

enterprise linux server tus · 8.6
redhat

enterprise linux server update services for sap solutions · 8.4
redhat

enterprise linux server update services for sap solutions · 8.6
redhat

enterprise linux workstation · 7.0
redhat

webkitgtk · Fixed in webkitgtk 2.26.0
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · User interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

The source reports that an attacker could run attacker-chosen code under the conditions described by the source. NVD’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.