vulnerability
Oracle Linux: CVE-2019-8658: ELSA-2020-4035: webkitgtk4 security, bug fix, and enhancement update (MODERATE)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Aug 29, 2019 | Oct 7, 2020 | Dec 3, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Aug 29, 2019
Added
Oct 7, 2020
Modified
Dec 3, 2025
Description
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
Solutions
oracle-linux-upgrade-webkitgtk4oracle-linux-upgrade-webkitgtk4-develoracle-linux-upgrade-webkitgtk4-docoracle-linux-upgrade-webkitgtk4-jscoracle-linux-upgrade-webkitgtk4-jsc-devel
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.