CVE-2020-13584 PUBLISHED

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability.

EPSS 1.16% · 78.5th percentile

Risk Scores

EPSS Score
1.16%
78.5th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSwebkit2gtk0, 2.8.5+dfsg1-3, 2.10.3+dfsg1-1
Ubuntu:22.04:LTSwpewebkit2.36.0-2ubuntu2, 0, 2.34.5-1
Ubuntu:18.04:LTSqtwebkit-source2.3.2-0ubuntu13, 0
Ubuntu:18.04:LTSwebkit2gtk2.28.2-0ubuntu0.18.04.1, 0, 2.18.0-2
Ubuntu:20.04:LTSwebkit2gtk2.28.0-1ubuntu2, 2.28.4-0ubuntu0.20.04.1, 2.28.3-0ubuntu0.20.04.1
Ubuntu:18.04:LTSqtwebkit-opensource-src5.212.0~alpha2-5build2, 5.212.0~alpha2-5build4, 5.212.0~alpha2-7
Ubuntu:24.04:LTSqtwebkit-opensource-src5.212.0~alpha4-36, 0, 5.212.0~alpha4-33
Ubuntu:16.04:LTSqtwebkit-source2.3.2-0ubuntu10, 0, 2.3.2-0ubuntu11
Ubuntu:18.04:LTSwebkitgtk2.4.11-3ubuntu2, 2.4.11-3, 2.4.11-3ubuntu3
Ubuntu:20.04:LTSqtwebkit-opensource-src5.212.0~alpha3-6, 5.212.0~alpha3-7, 5.212.0~alpha4-1
Ubuntu:20.04:LTSwpewebkit2.26.4-1build1, 2.26.4-1, 2.26.3-1
Ubuntu:16.04:LTSwebkitgtk2.4.9-2ubuntu2, 0, 2.4.11-0ubuntu0.1
Ubuntu:16.04:LTSqtwebkit-opensource-src5.4.2+dfsg-1ubuntu2.1, 5.5.1+dfsg-2ubuntu1, 0
Ubuntu:22.04:LTSqtwebkit-opensource-src5.212.0~alpha4-14, 5.212.0~alpha4-14ubuntu2, 5.212.0~alpha4-15ubuntu1

Timeline

References

Open in Interactive Console →