{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "iOS versions 13.x ant\u00e9rieures \u00e0 13.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Xcode versions ant\u00e9rieures \u00e0 11.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions 5.x ant\u00e9rieures \u00e0 5.3.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Mojave sans le correctif de s\u00e9curit\u00e9 2019-002",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions 6.x ant\u00e9rieures \u00e0 6.1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 13.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "High Sierra sans le correctif de s\u00e9curit\u00e9 2019-007",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 13.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 13.0.4",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions 12.x ant\u00e9rieures \u00e0 12.4.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-14463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14463"
    },
    {
      "name": "CVE-2019-8847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8847"
    },
    {
      "name": "CVE-2018-14468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14468"
    },
    {
      "name": "CVE-2018-16451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16451"
    },
    {
      "name": "CVE-2015-1545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1545"
    },
    {
      "name": "CVE-2012-2668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2668"
    },
    {
      "name": "CVE-2012-1164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1164"
    },
    {
      "name": "CVE-2018-14881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14881"
    },
    {
      "name": "CVE-2017-16808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-16808"
    },
    {
      "name": "CVE-2019-13057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13057"
    },
    {
      "name": "CVE-2019-8840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8840"
    },
    {
      "name": "CVE-2019-8835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8835"
    },
    {
      "name": "CVE-2018-16227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16227"
    },
    {
      "name": "CVE-2019-15165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15165"
    },
    {
      "name": "CVE-2019-8832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8832"
    },
    {
      "name": "CVE-2019-8844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8844"
    },
    {
      "name": "CVE-2019-8857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8857"
    },
    {
      "name": "CVE-2019-8841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8841"
    },
    {
      "name": "CVE-2019-8837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8837"
    },
    {
      "name": "CVE-2018-16228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16228"
    },
    {
      "name": "CVE-2019-15164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15164"
    },
    {
      "name": "CVE-2019-8852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8852"
    },
    {
      "name": "CVE-2019-8839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8839"
    },
    {
      "name": "CVE-2018-14465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14465"
    },
    {
      "name": "CVE-2019-15162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15162"
    },
    {
      "name": "CVE-2018-10103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10103"
    },
    {
      "name": "CVE-2018-14880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14880"
    },
    {
      "name": "CVE-2019-15161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15161"
    },
    {
      "name": "CVE-2018-14470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14470"
    },
    {
      "name": "CVE-2019-8856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8856"
    },
    {
      "name": "CVE-2018-14469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14469"
    },
    {
      "name": "CVE-2018-14879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14879"
    },
    {
      "name": "CVE-2019-8853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8853"
    },
    {
      "name": "CVE-2013-4449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4449"
    },
    {
      "name": "CVE-2018-10105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10105"
    },
    {
      "name": "CVE-2018-14466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14466"
    },
    {
      "name": "CVE-2019-8830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8830"
    },
    {
      "name": "CVE-2019-8833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8833"
    },
    {
      "name": "CVE-2019-15163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15163"
    },
    {
      "name": "CVE-2018-16301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16301"
    },
    {
      "name": "CVE-2018-16230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16230"
    },
    {
      "name": "CVE-2018-16452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16452"
    },
    {
      "name": "CVE-2019-8848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8848"
    },
    {
      "name": "CVE-2019-8842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8842"
    },
    {
      "name": "CVE-2018-14464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14464"
    },
    {
      "name": "CVE-2018-14462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14462"
    },
    {
      "name": "CVE-2019-8838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8838"
    },
    {
      "name": "CVE-2019-15166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15166"
    },
    {
      "name": "CVE-2018-14461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14461"
    },
    {
      "name": "CVE-2019-8828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8828"
    },
    {
      "name": "CVE-2018-14467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14467"
    },
    {
      "name": "CVE-2019-13565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13565"
    },
    {
      "name": "CVE-2019-8846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8846"
    },
    {
      "name": "CVE-2018-14882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14882"
    },
    {
      "name": "CVE-2019-15167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15167"
    },
    {
      "name": "CVE-2019-15903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
    },
    {
      "name": "CVE-2018-16229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16229"
    },
    {
      "name": "CVE-2018-16300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16300"
    },
    {
      "name": "CVE-2019-8836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8836"
    }
  ],
  "links": [],
  "reference": "CERTFR-2019-AVI-620",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-12-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210792 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210792"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210789 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210789"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210787 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210787"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210785 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210785"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210796 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210796"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210791 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210791"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210790 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210790"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210788 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210788"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "iOS versions 13.x ant\u00e9rieures \u00e0 13.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Xcode versions ant\u00e9rieures \u00e0 11.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions 5.x ant\u00e9rieures \u00e0 5.3.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Mojave sans le correctif de s\u00e9curit\u00e9 2019-002",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions 6.x ant\u00e9rieures \u00e0 6.1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 13.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "High Sierra sans le correctif de s\u00e9curit\u00e9 2019-007",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 13.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 13.0.4",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions 12.x ant\u00e9rieures \u00e0 12.4.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-14463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14463"
    },
    {
      "name": "CVE-2019-8847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8847"
    },
    {
      "name": "CVE-2018-14468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14468"
    },
    {
      "name": "CVE-2018-16451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16451"
    },
    {
      "name": "CVE-2015-1545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1545"
    },
    {
      "name": "CVE-2012-2668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2668"
    },
    {
      "name": "CVE-2012-1164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1164"
    },
    {
      "name": "CVE-2018-14881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14881"
    },
    {
      "name": "CVE-2017-16808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-16808"
    },
    {
      "name": "CVE-2019-13057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13057"
    },
    {
      "name": "CVE-2019-8840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8840"
    },
    {
      "name": "CVE-2019-8835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8835"
    },
    {
      "name": "CVE-2018-16227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16227"
    },
    {
      "name": "CVE-2019-15165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15165"
    },
    {
      "name": "CVE-2019-8832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8832"
    },
    {
      "name": "CVE-2019-8844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8844"
    },
    {
      "name": "CVE-2019-8857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8857"
    },
    {
      "name": "CVE-2019-8841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8841"
    },
    {
      "name": "CVE-2019-8837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8837"
    },
    {
      "name": "CVE-2018-16228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16228"
    },
    {
      "name": "CVE-2019-15164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15164"
    },
    {
      "name": "CVE-2019-8852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8852"
    },
    {
      "name": "CVE-2019-8839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8839"
    },
    {
      "name": "CVE-2018-14465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14465"
    },
    {
      "name": "CVE-2019-15162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15162"
    },
    {
      "name": "CVE-2018-10103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10103"
    },
    {
      "name": "CVE-2018-14880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14880"
    },
    {
      "name": "CVE-2019-15161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15161"
    },
    {
      "name": "CVE-2018-14470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14470"
    },
    {
      "name": "CVE-2019-8856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8856"
    },
    {
      "name": "CVE-2018-14469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14469"
    },
    {
      "name": "CVE-2018-14879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14879"
    },
    {
      "name": "CVE-2019-8853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8853"
    },
    {
      "name": "CVE-2013-4449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4449"
    },
    {
      "name": "CVE-2018-10105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10105"
    },
    {
      "name": "CVE-2018-14466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14466"
    },
    {
      "name": "CVE-2019-8830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8830"
    },
    {
      "name": "CVE-2019-8833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8833"
    },
    {
      "name": "CVE-2019-15163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15163"
    },
    {
      "name": "CVE-2018-16301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16301"
    },
    {
      "name": "CVE-2018-16230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16230"
    },
    {
      "name": "CVE-2018-16452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16452"
    },
    {
      "name": "CVE-2019-8848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8848"
    },
    {
      "name": "CVE-2019-8842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8842"
    },
    {
      "name": "CVE-2018-14464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14464"
    },
    {
      "name": "CVE-2018-14462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14462"
    },
    {
      "name": "CVE-2019-8838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8838"
    },
    {
      "name": "CVE-2019-15166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15166"
    },
    {
      "name": "CVE-2018-14461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14461"
    },
    {
      "name": "CVE-2019-8828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8828"
    },
    {
      "name": "CVE-2018-14467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14467"
    },
    {
      "name": "CVE-2019-13565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13565"
    },
    {
      "name": "CVE-2019-8846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8846"
    },
    {
      "name": "CVE-2018-14882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14882"
    },
    {
      "name": "CVE-2019-15167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15167"
    },
    {
      "name": "CVE-2019-15903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
    },
    {
      "name": "CVE-2018-16229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16229"
    },
    {
      "name": "CVE-2018-16300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16300"
    },
    {
      "name": "CVE-2019-8836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8836"
    }
  ],
  "links": [],
  "reference": "CERTFR-2019-AVI-620",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-12-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210792 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210792"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210789 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210789"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210787 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210787"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210785 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210785"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210796 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210796"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210791 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210791"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210790 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210790"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT210788 du 10 d\u00e9cembre 2019",
      "url": "https://support.apple.com/en-us/HT210788"
    }
  ]
}

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-8835"
    }
  },
  "description": "Apple iOS\u7b49\u90fd\u662f\u7f8e\u56fd\u82f9\u679c\uff08Apple\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Apple iOS\u662f\u4e00\u5957\u4e3a\u79fb\u52a8\u8bbe\u5907\u6240\u5f00\u53d1\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002Apple tvOS\u662f\u4e00\u5957\u667a\u80fd\u7535\u89c6\u64cd\u4f5c\u7cfb\u7edf\u3002Apple iPadOS\u662f\u4e00\u5957\u7528\u4e8eiPad\u5e73\u677f\u7535\u8111\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002WebKit\u662f\u5176\u4e2d\u7684\u4e00\u4e2aWeb\u6d4f\u89c8\u5668\u5f15\u64ce\u7ec4\u4ef6\u3002\n\n\u591a\u6b3eApple\u4ea7\u54c1\u4e2d\u7684WebKit\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u501f\u52a9\u7279\u5236\u7684Web\u5185\u5bb9\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff08\u5185\u5b58\u635f\u574f\uff09\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://support.apple.com/en-us/HT210785",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-46121",
  "openTime": "2019-12-19",
  "patchDescription": "Apple iOS\u7b49\u90fd\u662f\u7f8e\u56fd\u82f9\u679c\uff08Apple\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Apple iOS\u662f\u4e00\u5957\u4e3a\u79fb\u52a8\u8bbe\u5907\u6240\u5f00\u53d1\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002Apple tvOS\u662f\u4e00\u5957\u667a\u80fd\u7535\u89c6\u64cd\u4f5c\u7cfb\u7edf\u3002Apple iPadOS\u662f\u4e00\u5957\u7528\u4e8eiPad\u5e73\u677f\u7535\u8111\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002WebKit\u662f\u5176\u4e2d\u7684\u4e00\u4e2aWeb\u6d4f\u89c8\u5668\u5f15\u64ce\u7ec4\u4ef6\u3002\r\n\r\n\u591a\u6b3eApple\u4ea7\u54c1\u4e2d\u7684WebKit\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u501f\u52a9\u7279\u5236\u7684Web\u5185\u5bb9\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff08\u5185\u5b58\u635f\u574f\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eApple\u4ea7\u54c1WebKit\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2019-46121\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Apple  iOS \u003c13.3",
      "Apple  iPadOS \u003c13.3",
      "Apple  tvOS \u003c13.3",
      "Apple Safari \u003c13.0.4"
    ]
  },
  "referenceLink": "https://support.apple.com/en-us/HT210785",
  "serverity": "\u9ad8",
  "submitTime": "2019-12-13",
  "title": "\u591a\u6b3eApple\u4ea7\u54c1WebKit\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2019-46121\uff09"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.10",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "10.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "7.16",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "product-security@apple.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
              "matchCriteriaId": "A359F12F-DF0E-4F81-B61A-53C12BC14516",
              "versionEndExcluding": "7.16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
              "matchCriteriaId": "551195C7-B789-4A5E-AE3A-941424771C18",
              "versionEndExcluding": "10.9",
              "versionStartIncluding": "10.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*",
              "matchCriteriaId": "6EE728F9-11A5-470B-8BF8-74A4B109B76D",
              "versionEndExcluding": "12.10.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D7B613D-BA59-4139-B691-175509E0B2EF",
              "versionEndExcluding": "13.0.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A02B4418-82F4-4A23-8F4C-3C03C5522FED",
              "versionEndExcluding": "13.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDAD0B76-9EF7-4CCF-8CDD-6CF7355D0767",
              "versionEndExcluding": "13.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "31FE522C-5C52-408C-8E46-A3479BF78463",
              "versionEndExcluding": "13.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution."
    },
    {
      "lang": "es",
      "value": "Se abord\u00f3 m\u00faltiples problemas de corrupci\u00f3n de memoria con un manejo de la memoria mejorada.\u0026#xa0;Este problema se corrigi\u00f3 en tvOS versi\u00f3n 13.3, iCloud para Windows versi\u00f3n 10.9, iOS versi\u00f3n 13.3 y iPadOS versi\u00f3n 13.3, Safari versi\u00f3n 13.0.4, iTunes versi\u00f3n 12.10.3 para Windows, iCloud para Windows versi\u00f3n 7.16.\u0026#xa0;El procesamiento de contenido web dise\u00f1ado maliciosamente puede conllevar a una ejecuci\u00f3n de c\u00f3digo arbitraria"
    }
  ],
  "id": "CVE-2019-8835",
  "lastModified": "2026-06-17T02:42:42.183",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-10-27T20:15:20.673",
  "references": [
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210785"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210790"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210792"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210793"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210794"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210795"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210785"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210790"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210792"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210793"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210794"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT210795"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2019-8835"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119",
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2020-10-27T20:15:00Z",
    "severity": "HIGH"
  },
  "details": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.",
  "id": "GHSA-p64v-jc94-867w",
  "modified": "2022-05-24T17:32:25Z",
  "published": "2022-05-24T17:32:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-8835"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT210785"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT210790"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT210792"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT210793"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT210794"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT210795"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2019-8835",
    "description": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.",
    "id": "GSD-2019-8835",
    "references": [
      "https://www.suse.com/security/cve/CVE-2019-8835.html",
      "https://www.debian.org/security/2020/dsa-4610",
      "https://access.redhat.com/errata/RHSA-2020:4451",
      "https://access.redhat.com/errata/RHSA-2020:4035",
      "https://ubuntu.com/security/CVE-2019-8835",
      "https://advisories.mageia.org/CVE-2019-8835.html",
      "https://security.archlinux.org/CVE-2019-8835",
      "https://linux.oracle.com/cve/CVE-2019-8835.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-8835"
      ],
      "details": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.",
      "id": "GSD-2019-8835",
      "modified": "2023-12-13T01:23:48.539221Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "product-security@apple.com",
        "ID": "CVE-2019-8835",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "iOS and iPadOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "13.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "tvOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "13.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Safari",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "13.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "iTunes for Windows",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "12.10"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "iCloud for Windows",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "10.9"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "iCloud for Windows",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "7.16"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Apple"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://support.apple.com/en-us/HT210785",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT210785"
          },
          {
            "name": "https://support.apple.com/en-us/HT210790",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT210790"
          },
          {
            "name": "https://support.apple.com/en-us/HT210793",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT210793"
          },
          {
            "name": "https://support.apple.com/en-us/HT210794",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT210794"
          },
          {
            "name": "https://support.apple.com/en-us/HT210792",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT210792"
          },
          {
            "name": "https://support.apple.com/en-us/HT210795",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT210795"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.16",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
                "cpe_name": [],
                "versionEndExcluding": "10.9",
                "versionStartIncluding": "10.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*",
                "cpe_name": [],
                "versionEndExcluding": "12.10.3",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "13.0.4",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "13.3",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "13.3",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "13.3",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8835"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT210790",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT210790"
            },
            {
              "name": "https://support.apple.com/en-us/HT210793",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT210793"
            },
            {
              "name": "https://support.apple.com/en-us/HT210792",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT210792"
            },
            {
              "name": "https://support.apple.com/en-us/HT210795",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT210795"
            },
            {
              "name": "https://support.apple.com/en-us/HT210794",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT210794"
            },
            {
              "name": "https://support.apple.com/en-us/HT210785",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT210785"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2021-05-18T13:19Z",
      "publishedDate": "2020-10-27T20:15Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for webkit2gtk3",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for webkit2gtk3 to version 2.26.4 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-8835: Fixed multiple memory corruption issues (bsc#1161719).\n- CVE-2019-8844: Fixed multiple memory corruption issues (bsc#1161719).\n- CVE-2019-8846: Fixed a use-after-free issue (bsc#1161719).\n- CVE-2020-3862: Fixed a memory handling issue (bsc#1163809).\n- CVE-2020-3864: Fixed a logic issue in the DOM object context handling (bsc#1163809).\n- CVE-2020-3865: Fixed a logic issue in the DOM object context handling (bsc#1163809).\n- CVE-2020-3867: Fixed an XSS issue (bsc#1163809).\n- CVE-2020-3868: Fixed multiple memory corruption issues that could have lead to arbitrary code execution (bsc#1163809).\n\nNon-security issues fixed:\n\n- Fixed issues while trying to play a video on NextCloud.\n- Fixed vertical alignment of text containing arabic diacritics.\n- Fixed build with icu 65.1.\n- Fixed page loading errors with websites using HSTS.\n- Fixed web process crash when displaying a KaTeX formula.\n- Fixed several crashes and rendering issues.\n- Switched to a single web process for Evolution and geary (bsc#1159329 glgo#GNOME/evolution#587).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-278",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0278-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:0278-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VOF6TVHJ47XHC6EPRQMZJI47W7QNTVVH/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:0278-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VOF6TVHJ47XHC6EPRQMZJI47W7QNTVVH/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1159329",
        "url": "https://bugzilla.suse.com/1159329"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161719",
        "url": "https://bugzilla.suse.com/1161719"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1163809",
        "url": "https://bugzilla.suse.com/1163809"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-8835 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-8835/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-8844 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-8844/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-8846 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-8846/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-3862 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-3862/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-3864 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-3864/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-3865 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-3865/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-3867 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-3867/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-3868 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-3868/"
      }
    ],
    "title": "Security update for webkit2gtk3",
    "tracking": {
      "current_release_date": "2020-03-01T23:15:29Z",
      "generator": {
        "date": "2020-03-01T23:15:29Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:0278-1",
      "initial_release_date": "2020-03-01T23:15:29Z",
      "revision_history": [
        {
          "date": "2020-03-01T23:15:29Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
                  "product_id": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
                  "product_id": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
                  "product_id": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
                  "product_id": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
                  "product_id": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
                  "product_id": "webkit-jsc-4-2.26.4-lp151.2.12.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
                  "product_id": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
                  "product_id": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
                "product": {
                  "name": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
                  "product_id": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
                "product": {
                  "name": "libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
                  "product_id": "libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64",
                "product": {
                  "name": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64",
                  "product_id": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch"
        },
        "product_reference": "libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit-jsc-4-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586"
        },
        "product_reference": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        },
        "product_reference": "webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-8835",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-8835"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-8835",
          "url": "https://www.suse.com/security/cve/CVE-2019-8835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161719 for CVE-2019-8835",
          "url": "https://bugzilla.suse.com/1161719"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-01T23:15:29Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-8835"
    },
    {
      "cve": "CVE-2019-8844",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-8844"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-8844",
          "url": "https://www.suse.com/security/cve/CVE-2019-8844"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161719 for CVE-2019-8844",
          "url": "https://bugzilla.suse.com/1161719"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-01T23:15:29Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-8844"
    },
    {
      "cve": "CVE-2019-8846",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-8846"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-8846",
          "url": "https://www.suse.com/security/cve/CVE-2019-8846"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161719 for CVE-2019-8846",
          "url": "https://bugzilla.suse.com/1161719"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-01T23:15:29Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-8846"
    },
    {
      "cve": "CVE-2020-3862",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-3862"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-3862",
          "url": "https://www.suse.com/security/cve/CVE-2020-3862"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1163809 for CVE-2020-3862",
          "url": "https://bugzilla.suse.com/1163809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-01T23:15:29Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-3862"
    },
    {
      "cve": "CVE-2020-3864",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-3864"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-3864",
          "url": "https://www.suse.com/security/cve/CVE-2020-3864"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1163809 for CVE-2020-3864",
          "url": "https://bugzilla.suse.com/1163809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-01T23:15:29Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-3864"
    },
    {
      "cve": "CVE-2020-3865",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-3865"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-3865",
          "url": "https://www.suse.com/security/cve/CVE-2020-3865"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1163809 for CVE-2020-3865",
          "url": "https://bugzilla.suse.com/1163809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-01T23:15:29Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-3865"
    },
    {
      "cve": "CVE-2020-3867",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-3867"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-3867",
          "url": "https://www.suse.com/security/cve/CVE-2020-3867"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1163809 for CVE-2020-3867",
          "url": "https://bugzilla.suse.com/1163809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-01T23:15:29Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-3867"
    },
    {
      "cve": "CVE-2020-3868",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-3868"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
          "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-3868",
          "url": "https://www.suse.com/security/cve/CVE-2020-3868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1163809 for CVE-2020-3868",
          "url": "https://bugzilla.suse.com/1163809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:libwebkit2gtk3-lang-2.26.4-lp151.2.12.1.noarch",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-JavaScriptCore-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:typelib-1_0-WebKit2WebExtension-4_0-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit-jsc-4-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk-4_0-injected-bundles-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-devel-2.26.4-lp151.2.12.1.x86_64",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.i586",
            "openSUSE Leap 15.1:webkit2gtk3-minibrowser-2.26.4-lp151.2.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-03-01T23:15:29Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-3868"
    }
  ]
}