{"history":[{"alert":0,"cve":"CVE-2019-8720","id":21850,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.01556, \"percentile\": 0.75531}"},{"alert":0,"cve":"CVE-2019-8720","id":19467,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.01556, \"percentile\": 0.75385}"},{"alert":0,"cve":"CVE-2019-8720","id":17433,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.01556, \"percentile\": 0.75355}"},{"alert":0,"cve":"CVE-2019-8720","id":15497,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.01556, \"percentile\": 0.75344}"},{"alert":0,"cve":"CVE-2019-8720","id":13475,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.01556, \"percentile\": 0.75327}"},{"alert":0,"cve":"CVE-2019-8720","id":11257,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.01556, \"percentile\": 0.75287}"},{"alert":1,"cve":"CVE-2019-8720","id":9459,"kind":"cna","observed_at":1793938800,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-04T21:24:29.610Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_transferred\"], \"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1876611\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://webkitgtk.org/security/WSA-2019-0005.html\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2019-8720\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-01-28T21:22:50.417013Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-05-23\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8720\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-10-07T17:29:07.389Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8720\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"webkitgtk\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"Fixed in webkitgtk 2.26.0\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-119\", \"description\": \"CWE-119\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2023-03-06T00:00:00.000Z\", \"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\"}, \"references\": [{\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1876611\"}, {\"url\": \"https://webkitgtk.org/security/WSA-2019-0005.html\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"assignerShortName\": \"redhat\", \"cveId\": \"CVE-2019-8720\", \"datePublished\": \"2023-03-06T00:00:00.000Z\", \"dateReserved\": \"2019-02-18T00:00:00.000Z\", \"dateUpdated\": \"2026-10-07T17:29:07.389Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2019-8720","id":9003,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.01556, \"percentile\": 0.75265}"},{"alert":0,"cve":"CVE-2019-8720","id":6791,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.01556, \"percentile\": 0.75246}"},{"alert":0,"cve":"CVE-2019-8720","id":4568,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.01556, \"percentile\": 0.75202}"},{"alert":0,"cve":"CVE-2019-8720","id":2350,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.01556, \"percentile\": 0.75175}"},{"alert":1,"cve":"CVE-2019-8720","id":1099,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2019-8720\", \"cwes\": [\"CWE-119\"], \"dateAdded\": \"2022-05-23\", \"dueDate\": \"2022-06-13\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2019-8720\", \"product\": \"WebKitGTK\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.\", \"vendorProject\": \"WebKitGTK\", \"vulnerabilityName\": \"WebKitGTK Memory Corruption Vulnerability\"}"}],"record":{"affected":[{"product":"webkitgtk","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in webkitgtk 2.26.0"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T21:24:29.610Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876611"},{"tags":["x_transferred"],"url":"https://webkitgtk.org/security/WSA-2019-0005.html"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2019-8720","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-01-28T21:22:50.417013Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-05-23","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8720"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2026-10-07T17:29:07.389Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8720"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"webkitgtk","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in webkitgtk 2.26.0"}]}],"descriptions":[{"lang":"en","value":"A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","description":"CWE-119","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2023-03-06T00:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876611"},{"url":"https://webkitgtk.org/security/WSA-2019-0005.html"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2019-8720","datePublished":"2023-03-06T00:00:00.000Z","dateReserved":"2019-02-18T00:00:00.000Z","dateUpdated":"2026-10-07T17:29:07.389Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1793938800,"cve":"CVE-2019-8720","description":"A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.","epss":{"date":"2026-11-12","epss":0.01556,"percentile":0.75531},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2019-8720","cwes":["CWE-119"],"dateAdded":"2022-05-23","dueDate":"2022-06-13","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8720","product":"WebKitGTK","requiredAction":"Apply updates per vendor instructions.","shortDescription":"WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.","vendorProject":"WebKitGTK","vulnerabilityName":"WebKitGTK Memory Corruption Vulnerability"},"kev_checked":1794522003,"products":"n/a webkitgtk","references":["https://bugzilla.redhat.com/show_bug.cgi?id=1876611","https://webkitgtk.org/security/WSA-2019-0005.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8720"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"WebKitGTK Memory Corruption Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}