The WebKitGTK project reports vulnerabilities:
- CVE-2020-9802: Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2020-9803: Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2020-9805: Processing maliciously crafted web content may lead to universal cross site scripting.
- CVE-2020-9806: Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2020-9807: Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2020-9843: Processing maliciously crafted web content may lead to a cross site scripting attack.
- CVE-2020-9850: A remote attacker may be able to cause arbitrary code execution.
- CVE-2020-13753: CLONE_NEWUSER could potentially be used to confuse xdg- desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute commands outside the sandbox by writing to the controlling terminal’s input buffer.