Yüksek CVSS 8.8 CISA KEV
CVE-2019-8720: Webkitgtk'de Güvenilmez İçerik İşlemede Kod Çalıştırma Açığı
Webkitgtk, kötü niyetli web içeriği işlerken kod çalıştırma riski taşıyor. Saldırganlar bu zafiyeti kullanarak sisteme zarar verebilir. Hemen Webkitgtk'nın güncel sürümüne geçilmelidir.
Türkçe özet yapay zekâ ile üretildi.
Açıklama (NVD)
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
Özet bilgiler
- Ürün
- Webkitgtk Webkitgtk
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %1,56 (yüzdelik 75)
- CWE
- CWE-119
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2022-05-23 · Son tarih: 2022-06-13
Gerekli aksiyon: Apply updates per vendor instructions.
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| webkitgtk-webkitgtk | — | — | 2.26.0 |
| wpewebkit-wpe-webkit | — | — | 2.26.0 |
| redhat-codeready-linux-builder | 8.0 | 8.0 | — |
| redhat-codeready-linux-builder-eus | 8.4 | 8.4 | — |
| redhat-codeready-linux-builder-eus | 8.6 | 8.6 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 8.0 | 8.0 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 8.4 | 8.4 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 8.6 | 8.6 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems-eus | 8.0 | 8.0 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems-eus | 8.4 | 8.4 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems-eus | 8.6 | 8.6 | — |
| redhat-codeready-linux-builder-for-power-little-endian-eus | 8.0 | 8.0 | — |
| redhat-codeready-linux-builder-for-power-little-endian-eus | 8.4 | 8.4 | — |
| redhat-codeready-linux-builder-for-power-little-endian-eus | 8.6 | 8.6 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux-desktop | 7.0 | 7.0 | — |
| redhat-enterprise-linux-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-eus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-eus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-for-arm64-eus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 7.0 | 7.0 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 8.0 | 8.0 | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-for-power-big-endian | 7.0 | 7.0 | — |
| redhat-enterprise-linux-for-power-little-endian | 7.0 | 7.0 | — |
| redhat-enterprise-linux-for-power-little-endian | 8.0 | 8.0 | — |
| redhat-enterprise-linux-for-power-little-endian-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-for-power-little-endian-eus | 8.6 | 8.6 | — |