CVE-2020-13584

HIGH8.8

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2

Published Dec 3, 2020

Modified 1 years ago

Details

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability.

References

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/

ADVISORY

https://security.gentoo.org/glsa/202012-10

WEB

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1195

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2020-13584

CVSS Analysis

CVSS v3.1

8.8