CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).

• CWE-416

• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00008.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3P4YISPE5QX4YD54GDRZIH2X5RCH3QGW/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3MQTRC6ITFTVS5R5Z24PMJS6FXJKGRD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTKY2MWP6PB6TE3ZKOOMKX7HZUCQNYF6/
• https://security.gentoo.org/glsa/202006-08
• https://usn.ubuntu.com/4331-1/Third Party Advisory
• https://webkitgtk.org/security/WSA-2020-0004.htmlVendor Advisory
• https://wpewebkit.org/security/WSA-2020-0004.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00008.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3P4YISPE5QX4YD54GDRZIH2X5RCH3QGW/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3MQTRC6ITFTVS5R5Z24PMJS6FXJKGRD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTKY2MWP6PB6TE3ZKOOMKX7HZUCQNYF6/
• https://security.gentoo.org/glsa/202006-08
• https://usn.ubuntu.com/4331-1/Third Party Advisory
• https://webkitgtk.org/security/WSA-2020-0004.htmlVendor Advisory
• https://wpewebkit.org/security/WSA-2020-0004.htmlVendor Advisory

Published

Apr 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11788Certain NETGEAR devices are affected by authentication bypas…8.8
• CVE-2020-11789Certain NETGEAR devices are affected by command injection by…9.8
• CVE-2020-1179An information disclosure vulnerability exists when the Wind…6.5
• CVE-2020-11790NETGEAR R7800 devices before 1.0.2.68 are affected by remote…9.8
• CVE-2020-11791NETGEAR JGS516PE devices before 2.6.0.43 are affected by ref…6.1
• CVE-2020-11792NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-…7.5
• CVE-2020-11795In JetBrains Space through 2020-04-22, the session timeout p…7.5
• CVE-2020-11796In JetBrains Space through 2020-04-22, the password authenti…9.8
• CVE-2020-11797An Authentication Bypass vulnerability in the Published Area…7.5
• CVE-2020-11798A Directory Traversal vulnerability in the web conference co…5.3
• CVE-2020-11799Z-Cron 5.6 Build 04 allows an unprivileged attacker to eleva…9.8
• CVE-2020-1180<p>A remote code execution vulnerability exists in the way t…4.2