CVE-2020-13584

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64

High · published December 3, 2020

CVSS v3.0
8.8
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04938 · 92.1th percentile
Published
2020-12-03T17:02Z
EPSS history
Timeline
  • 03 DEC 17:02Z
    An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64
    cvelistv5