USN-4178-1 — webkit2gtk vulnerabilities

Summary

A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	webkit2gtk	2.26.1-0ubuntu0.18.04.1

Vulnerabilities 4

High 8.8

CVE-2019-8720 Exploited

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lea…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Mar 6, 2023
KEV May 23, 2022
Unscored —

CVE-2019-8625

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1,…

Apple tvOS iTunes for Windows iCloud for Windows Windows Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed …

Apple macOS iOS qtwebkit-source macOS iOS Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Malici…

Apple Safari iOS qtwebkit-source iOS Browsers Debian Ubuntu Alpine

Oct 27, 2020

References

report
https://ubuntu.com/security/CVE-2019-8625
report
https://ubuntu.com/security/CVE-2019-8720
report
https://ubuntu.com/security/CVE-2019-8769
report
https://ubuntu.com/security/CVE-2019-8771

webkit2gtk vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 4

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lea…

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1,…

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed …

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Malici…

References