CVE-2020-11793: Canonical Ubuntu Linux

High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days.

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).

Affected products

• Canonical Ubuntu Linux: version 18.04 only; version 19.10 only
• Fedoraproject Fedora: version 30 only; version 31 only; version 32 only
• Opensuse Leap: version 15.1 only
• WebKitGTK WebKitGTK: before 2.28.1 (fixed in 2.28.1)
• Wpewebkit Wpe Webkit: before 2.28.1 (fixed in 2.28.1)

Published 2020-04-17. Last modified 2026-06-17.