CVE-2019-8644
Multiple memory corruption issues were addressed with improved memory handling. This issue is...
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
CVE-2019-8644- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-416, CWE-787
- Updated
- 2026-11-02
CVE List No score
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
CVE-2019-8644- Updated
- 2026-11-02
EUVDEUVD-2019-18034 No score
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
EUVD-2019-18034- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3wx7-h26j-wp5f No score
Multiple memory corruption issues were addressed with improved memory handling. This issue is...
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
GHSA-3wx7-h26j-wp5f- Weakness
- CWE-416
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-8644
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
ALPINE-CVE-2019-8644- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
CVE-2019-8644- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 12 moreShow less
OSVDEBIAN-CVE-2019-8644
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
DEBIAN-CVE-2019-8644- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHEA-2019:4262
Red Hat Enhancement Advisory: webkit2gtk3 enhancement update
- Record
RHEA-2019:4262- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:4035
Red Hat Security Advisory: webkitgtk4 security, bug fix, and enhancement update
- Record
RHSA-2020:4035- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-8644
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
UBUNTU-CVE-2019-8644- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0281 No score
Updated webkit2 packages fix security vulnerabilities
Updated webkit2 packages fix security vulnerabilities:
Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling (CVE-2019-8644).
Processing maliciously crafted web content may lead to universal cross site scripting. A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management (CVE-2019-8649).
Processing maliciously crafted web content may lead to universal cross site scripting. A logic issue was addressed with improved state management (CVE-2019-8658).
Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling (CVE-2019-8666, CVE-2019-8669, CVE-2019-8671, CVE-2019-8672, CVE-2019-8673, CVE-2019-8676, CVE-2019-8677, CVE-2019-8678, CVE-2019-8679, CVE-2019-8680, CVE-2019-8681, CVE-2019-8683, CVE-2019-8684, CVE-2019-8686, CVE-2019-8687, CVE-2019-8688, CVE-2019-8689).
Processing maliciously crafted web content may lead to universal cross site scripting. A logic issue existed in the handling of document loads. This issue was addressed with improved state management (CVE-2019-8690).
For other fixes in this update, see the referenced release links.
- Record
MGASA-2019-0281- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2207-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Security issues fixed:
- CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666, CVE-2019-8644, CVE-2019-8658, CVE-2019-8690, CVE-2019-8688, CVE-2019-8649, CVE-2019-8679, CVE-2019-8687, CVE-2019-8669, CVE-2019-8677, CVE-2019-8607 (bsc#1148931).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2207-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2208-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Security issues fixed:
- CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666, CVE-2019-8644, CVE-2019-8658, CVE-2019-8690, CVE-2019-8688, CVE-2019-8649, CVE-2019-8679, CVE-2019-8687, CVE-2019-8669, CVE-2019-8677, CVE-2019-8607 (bsc#1148931).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2208-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11506-1 No score
libjavascriptcoregtk-4_0-18-2.32.4-1.1 on GA media
These are all security issues fixed in the libjavascriptcoregtk-4_0-18-2.32.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11506-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2345-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Updated to version 2.24.4 (bsc#1148931).
Security issues fixed:
- CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8666, CVE-2019-8669, CVE-2019-8671, CVE-2019-8672, CVE-2019-8673, CVE-2019-8676, CVE-2019-8677, CVE-2019-8678, CVE-2019-8679, CVE-2019-8680, CVE-2019-8681, CVE-2019-8683, CVE-2019-8684, CVE-2019-8686, CVE-2019-8687, CVE-2019-8688, CVE-2019-8689, CVE-2019-8690
Non-security issues fixed:
- Improved loading of multimedia streams to avoid memory exhaustion due to excessive caching.
- Updated the user agent string to make happy certain websites which would claim that the browser being used was unsupported.
- Record
SUSE-SU-2019:2345-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2345-2 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Updated to version 2.24.4 (bsc#1148931).
Security issues fixed:
- CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8666, CVE-2019-8669, CVE-2019-8671, CVE-2019-8672, CVE-2019-8673, CVE-2019-8676, CVE-2019-8677, CVE-2019-8678, CVE-2019-8679, CVE-2019-8680, CVE-2019-8681, CVE-2019-8683, CVE-2019-8684, CVE-2019-8686, CVE-2019-8687, CVE-2019-8688, CVE-2019-8689, CVE-2019-8690
Non-security issues fixed:
- Improved loading of multimedia streams to avoid memory exhaustion due to excessive caching.
- Updated the user agent string to make happy certain websites which would claim that the browser being used was unsupported.
- Record
SUSE-SU-2019:2345-2- Updated
- 2026-11-02
OSVSUSE-SU-2019:2428-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Security issues fixed:
- CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666, CVE-2019-8644, CVE-2019-8658, CVE-2019-8690, CVE-2019-8688, CVE-2019-8649, CVE-2019-8679, CVE-2019-8687, CVE-2019-8669, CVE-2019-8677, CVE-2019-8607 (bsc#1148931).
- Record
SUSE-SU-2019:2428-1- Updated
- 2026-11-02
OSVUSN-4130-1 No score
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.
- Record
USN-4130-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtkAlpine:v3.10 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.11 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.12 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.13 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.14 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.15 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.16 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.17 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.18 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkAlpine:v3.19 |
before 2.24.3-r0 | 2.24.3-r0 |
Show 77 moreShow less
| Package | Affected | Fixed |
|---|---|---|
webkit2gtkAlpine:v3.20 |
before 2.24.3-r0 | 2.24.3-r0 |
webkit2gtkDebian:12 |
before 2.24.4-1 | 2.24.4-1 |
webkit2gtkDebian:13 |
before 2.24.4-1 | 2.24.4-1 |
webkit2gtkDebian:14 |
before 2.24.4-1 | 2.24.4-1 |
webkit2gtkDebian:10 From an advisory covering 29 CVEs |
before 2.24.4-1~deb10u1, plus listed versions 2.24.2-12.24.2-22.24.3-12.24.3-1~bpo10+12.24.3-1~bpo9+12.24.3-1~deb10u12.24.4-1~bpo10+12.24.4-1~bpo9+1 |
2.24.4-1~deb10u1 |
webkit2Mageia:7 From an advisory covering 21 CVEs |
before 2.24.4-1.mga7 | 2.24.4-1.mga7 |
webkit2gtk3Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-develRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-jscRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-plugin-process-gtk2Red Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkit2gtk3-plugin-process-gtk2-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 17 CVEs |
before 0:2.24.4-2.el8_1 | 0:2.24.4-2.el8_1 |
webkitgtk4Red Hat:enterprise_linux:7::client From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-jscRed Hat:enterprise_linux:7::client From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-develRed Hat:enterprise_linux:7::client From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-docRed Hat:enterprise_linux:7::client From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-jsc-develRed Hat:enterprise_linux:7::client From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4Red Hat:enterprise_linux:7::computenode From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-jscRed Hat:enterprise_linux:7::computenode From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-develRed Hat:enterprise_linux:7::computenode From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-docRed Hat:enterprise_linux:7::computenode From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-jsc-develRed Hat:enterprise_linux:7::computenode From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4Red Hat:enterprise_linux:7::server From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-develRed Hat:enterprise_linux:7::server From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-jscRed Hat:enterprise_linux:7::server From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-jsc-develRed Hat:enterprise_linux:7::server From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-docRed Hat:enterprise_linux:7::server From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4Red Hat:enterprise_linux:7::workstation From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-develRed Hat:enterprise_linux:7::workstation From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-jscRed Hat:enterprise_linux:7::workstation From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-jsc-develRed Hat:enterprise_linux:7::workstation From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkitgtk4-docRed Hat:enterprise_linux:7::workstation From an advisory covering 104 CVEs |
before 0:2.28.2-2.el7 | 0:2.28.2-2.el7 |
webkit2gtk3SUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP4 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Workstation Extension 12 SP4 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:HPE Helion OpenStack 8 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:OpenStack Cloud 7 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:OpenStack Cloud 8 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:OpenStack Cloud Crowbar 8 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Enterprise Storage 4 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Enterprise Storage 5 From an advisory covering 24 CVEs |
before 2.24.4-2.47.1 | 2.24.4-2.47.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 24 CVEs |
before 2.24.4-3.31.1 | 2.24.4-3.31.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 24 CVEs |
before 2.24.4-3.31.1 | 2.24.4-3.31.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 From an advisory covering 24 CVEs |
before 2.24.4-3.31.1 | 2.24.4-3.31.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 24 CVEs |
before 2.24.4-3.31.1 | 2.24.4-3.31.1 |
qtwebkit-opensource-srcUbuntu:16.04:LTS |
All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 |
None known |
webkit2gtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1 Show 21 moreShow less2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1 |
None known |
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
webkitgtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 |
None known |
webkit2gtkUbuntu:18.04:LTS |
before 2.24.4-0ubuntu0.18.04.1, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 17 moreShow less2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.1 |
2.24.4-0ubuntu0.18.04.1 |
qtwebkit-opensource-srcUbuntu:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1 |
None known |
qtwebkit-sourceUbuntu:18.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu13 |
None known |
webkitgtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3 |
None known |
qtwebkit-opensource-srcUbuntu:20.04:LTS |
All versions, plus listed versions 5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1 |
None known |
qtwebkit-opensource-srcUbuntu:22.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1 |
None known |
qtwebkit-opensource-srcUbuntu:24.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36 |
None known |
webkit2gtkUbuntu:18.04:LTS From an advisory covering 16 CVEs |
before 2.24.4-0ubuntu0.18.04.1, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 17 moreShow less2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.1 |
2.24.4-0ubuntu0.18.04.1 |
webkit2gtk3openSUSE:Leap 15.0 From an advisory covering 24 CVEs |
before 2.24.4-lp150.2.25.1 | 2.24.4-lp150.2.25.1 |
webkit2gtk3openSUSE:Leap 15.1 From an advisory covering 24 CVEs |
before 2.24.4-lp151.2.6.1 | 2.24.4-lp151.2.6.1 |
gtk3openSUSE:Tumbleweed From an advisory covering 126 CVEs |
before 2.32.4-1.1 | 2.32.4-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-8644 is a high vulnerability (CVSS 8.8) in Apple Icloud, published September 4, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 77th percentile. Fixed in webkit2gtk 2.24.3-r0.
References
support.apple.com/HT210346
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-8644
github.com/advisories/GHSA-3wx7-h26j-wp5f
security.alpinelinux.org/vuln/CVE-2019-8644
security-tracker.debian.org/tracker/CVE-2019-8644
advisories.mageia.org/MGASA-2019-0281.html
bugs.mageia.org/show_bug.cgi?id=25377
webkitgtk.org/security/WSA-2019-0004.html
access.redhat.com/errata/RHEA-2019:4262
bugzilla.redhat.com/show_bug.cgi?id=1755824
security.access.redhat.com/data/csaf/v2/advisories/2019/rhea-2019_4262.json
cve.org/CVERecord?id=CVE-2019-8644
cisa.gov/known-exploited-vulnerabilities-catalog
suse.com/support/update/announcement/2019/suse-su-20192345-1
bugzilla.suse.com/1135715
ubuntu.com/security/CVE-2019-8644
lists.opensuse.org/archives/list/[email protected]/thread/ILDNTG7O4EJQAKVHL4AWGZGRHZJTSPFV
Left out here: 414 references. The JSON record has them.