Vulnerability-Lookup

RHSA-2020_4035

Vulnerability from csaf_redhat - Published: 2020-09-29 20:16 - Updated: 2024-11-22 14:52

Summary

Red Hat Security Advisory: webkitgtk4 security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3. The following packages have been upgraded to a later upstream version: webkitgtk4 (2.28.2). (BZ#1817144) Security Fix(es): * webkitgtk: Multiple security issues (CVE-2019-6237, CVE-2019-6251, CVE-2019-8506, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8607, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8625, CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8666, CVE-2019-8669, CVE-2019-8671, CVE-2019-8672, CVE-2019-8673, CVE-2019-8674, CVE-2019-8676, CVE-2019-8677, CVE-2019-8678, CVE-2019-8679, CVE-2019-8680, CVE-2019-8681, CVE-2019-8683, CVE-2019-8684, CVE-2019-8686, CVE-2019-8687, CVE-2019-8688, CVE-2019-8689, CVE-2019-8690, CVE-2019-8707, CVE-2019-8710, CVE-2019-8719, CVE-2019-8720, CVE-2019-8726, CVE-2019-8733, CVE-2019-8735, CVE-2019-8743, CVE-2019-8763, CVE-2019-8764, CVE-2019-8765, CVE-2019-8766, CVE-2019-8768, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8821, CVE-2019-8822, CVE-2019-8823, CVE-2019-8835, CVE-2019-8844, CVE-2019-8846, CVE-2019-11070, CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2020-10018, CVE-2020-11793) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2019-6237

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products

Product	Version	Remediation
Unresolved product id: 7Client-7.9:webkitgtk4-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-0:2.28.2-2.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-doc-0:2.28.2-2.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-0:2.28.2-2.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-doc-0:2.28.2-2.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-0:2.28.2-2.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-doc-0:2.28.2-2.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-0:2.28.2-2.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-doc-0:2.28.2-2.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-0:2.28.2-2.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-doc-0:2.28.2-2.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-0:2.28.2-2.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-doc-0:2.28.2-2.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-0:2.28.2-2.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-doc-0:2.28.2-2.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-0:2.28.2-2.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-debuginfo-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-doc-0:2.28.2-2.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.9:webkitgtk4-jsc-devel-0:2.28.2-2.el7.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.

4.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE-20 - Improper Input Validation

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8506

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

CVE-2019-8524

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8535

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8536

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8544

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8551

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8558

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8559

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8563

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8571

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8583

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8584

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8586

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8587

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8594

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8595

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8596

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8597

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8601

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8608

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8609

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8610

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8611

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8615

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8619

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8622

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8623

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8625

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8644

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8649

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8658

A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8666

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8669

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8671

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8672

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8673

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8674

A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8676

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8677

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8678

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8679

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8680

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8681

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8683

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8684

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8686

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8687

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8688

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8689

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8690

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8707

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8710

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8719

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8720

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

CVE-2019-8726

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8733

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8735

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8743

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8763

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13, Safari 13.0.1, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8764

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8765

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8766

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8768

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Low

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8783

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8808

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8811

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8812

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8813

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8814

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8815

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8816

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8819

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8820

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8821

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8822

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8823

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8835

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8844

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-8846

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2019-11070

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3862

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Low

CVE-2020-3864

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3865

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3867

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3868

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3885

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Low

CVE-2020-3894

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory.

3.1 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Low

CVE-2020-3895

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3897

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3899

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3900

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3901

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-3902

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-10018

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memory handling.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2020-11793

A use-after-free flaw exists in WebKitGTK. This flaw allows remote attackers to execute arbitrary code or cause a denial of service.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Impact Moderate

CVE-2021-30666

A flaw was found in the webkitgtk package. Affected versions of this package are vulnerable to a buffer overflow caused by improper bounds checking by the WebKit component. By persuading a victim to visit a specially crafted Web site, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

CVE-2021-30761

A flaw was found in the webkitgtk package. Affected versions of this package could allow a remote attacker to execute arbitrary code on the system caused by memory corruption in the WebKit component. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

CVE-2021-30762

A flaw was found in the webkitgtk package. Affected versions of this package could allow a remote attacker to execute arbitrary code on the system caused by a use-after-free in the WebKit component. By persuading a victim to visit a specially crafted Web site, an attacker can execute arbitrary code on the system.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 296 products, the same list as for CVE-2019-6237

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

References

532 references

URL	Category
https://access.redhat.com/errata/RHSA-2020:4035	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1667409	external
https://bugzilla.redhat.com/show_bug.cgi?id=1709289	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719199	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719209	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719210	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719213	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719224	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719231	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719235	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719237	external
https://bugzilla.redhat.com/show_bug.cgi?id=1719238	external
https://bugzilla.redhat.com/show_bug.cgi?id=1811721	external
https://bugzilla.redhat.com/show_bug.cgi?id=1816678	external
https://bugzilla.redhat.com/show_bug.cgi?id=1816684	external
https://bugzilla.redhat.com/show_bug.cgi?id=1816686	external
https://bugzilla.redhat.com/show_bug.cgi?id=1817144	external
https://bugzilla.redhat.com/show_bug.cgi?id=1829369	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876462	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876463	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876465	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876468	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876470	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876472	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876473	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876476	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876516	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876518	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876521	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876522	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876523	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876536	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876537	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876540	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876542	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876543	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876545	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876548	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876549	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876550	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876552	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876553	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876554	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876555	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876556	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876590	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876591	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876592	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876593	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876594	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876607	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876608	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876609	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876610	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876611	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876612	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876613	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876614	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876615	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876616	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876617	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876619	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876626	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876628	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876629	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876630	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876631	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876632	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876634	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876643	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876644	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876645	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876646	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876647	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876648	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876650	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876651	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876652	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876653	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876655	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876656	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876657	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876664	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876880	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876881	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876882	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876883	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876884	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876887	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876891	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876892	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876893	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876894	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876895	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876897	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876898	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876899	external
https://bugzilla.redhat.com/show_bug.cgi?id=1876900	external
https://bugzilla.redhat.com/show_bug.cgi?id=1877045	external
https://bugzilla.redhat.com/show_bug.cgi?id=1877046	external
https://bugzilla.redhat.com/show_bug.cgi?id=1877047	external
https://bugzilla.redhat.com/show_bug.cgi?id=1877048	external
https://bugzilla.redhat.com/show_bug.cgi?id=1877049	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2019-6237	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876880	external
https://www.cve.org/CVERecord?id=CVE-2019-6237	external
https://nvd.nist.gov/vuln/detail/CVE-2019-6237	external
https://webkitgtk.org/security/WSA-2019-0003.html	external
https://access.redhat.com/security/cve/CVE-2019-6251	self
https://bugzilla.redhat.com/show_bug.cgi?id=1667409	external
https://www.cve.org/CVERecord?id=CVE-2019-6251	external
https://nvd.nist.gov/vuln/detail/CVE-2019-6251	external
https://access.redhat.com/security/cve/CVE-2019-8506	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719199	external
https://www.cve.org/CVERecord?id=CVE-2019-8506	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8506	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2019-8524	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719209	external
https://www.cve.org/CVERecord?id=CVE-2019-8524	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8524	external
https://access.redhat.com/security/cve/CVE-2019-8535	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719210	external
https://www.cve.org/CVERecord?id=CVE-2019-8535	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8535	external
https://access.redhat.com/security/cve/CVE-2019-8536	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719213	external
https://www.cve.org/CVERecord?id=CVE-2019-8536	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8536	external
https://access.redhat.com/security/cve/CVE-2019-8544	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719224	external
https://www.cve.org/CVERecord?id=CVE-2019-8544	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8544	external
https://access.redhat.com/security/cve/CVE-2019-8551	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719238	external
https://www.cve.org/CVERecord?id=CVE-2019-8551	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8551	external
https://access.redhat.com/security/cve/CVE-2019-8558	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719231	external
https://www.cve.org/CVERecord?id=CVE-2019-8558	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8558	external
https://access.redhat.com/security/cve/CVE-2019-8559	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719235	external
https://www.cve.org/CVERecord?id=CVE-2019-8559	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8559	external
https://access.redhat.com/security/cve/CVE-2019-8563	self
https://bugzilla.redhat.com/show_bug.cgi?id=1719237	external
https://www.cve.org/CVERecord?id=CVE-2019-8563	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8563	external
https://access.redhat.com/security/cve/CVE-2019-8571	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876881	external
https://www.cve.org/CVERecord?id=CVE-2019-8571	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8571	external
https://access.redhat.com/security/cve/CVE-2019-8583	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876882	external
https://www.cve.org/CVERecord?id=CVE-2019-8583	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8583	external
https://access.redhat.com/security/cve/CVE-2019-8584	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876883	external
https://www.cve.org/CVERecord?id=CVE-2019-8584	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8584	external
https://access.redhat.com/security/cve/CVE-2019-8586	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876884	external
https://www.cve.org/CVERecord?id=CVE-2019-8586	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8586	external
https://access.redhat.com/security/cve/CVE-2019-8587	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876887	external
https://www.cve.org/CVERecord?id=CVE-2019-8587	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8587	external
https://access.redhat.com/security/cve/CVE-2019-8594	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876891	external
https://www.cve.org/CVERecord?id=CVE-2019-8594	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8594	external
https://access.redhat.com/security/cve/CVE-2019-8595	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876892	external
https://www.cve.org/CVERecord?id=CVE-2019-8595	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8595	external
https://access.redhat.com/security/cve/CVE-2019-8596	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876893	external
https://www.cve.org/CVERecord?id=CVE-2019-8596	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8596	external
https://access.redhat.com/security/cve/CVE-2019-8597	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876894	external
https://www.cve.org/CVERecord?id=CVE-2019-8597	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8597	external
https://access.redhat.com/security/cve/CVE-2019-8601	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876895	external
https://www.cve.org/CVERecord?id=CVE-2019-8601	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8601	external
https://access.redhat.com/security/cve/CVE-2019-8607	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876897	external
https://www.cve.org/CVERecord?id=CVE-2019-8607	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8607	external
https://access.redhat.com/security/cve/CVE-2019-8608	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876898	external
https://www.cve.org/CVERecord?id=CVE-2019-8608	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8608	external
https://access.redhat.com/security/cve/CVE-2019-8609	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876899	external
https://www.cve.org/CVERecord?id=CVE-2019-8609	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8609	external
https://access.redhat.com/security/cve/CVE-2019-8610	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876900	external
https://www.cve.org/CVERecord?id=CVE-2019-8610	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8610	external
https://access.redhat.com/security/cve/CVE-2019-8611	self
https://bugzilla.redhat.com/show_bug.cgi?id=1877046	external
https://www.cve.org/CVERecord?id=CVE-2019-8611	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8611	external
https://access.redhat.com/security/cve/CVE-2019-8615	self
https://bugzilla.redhat.com/show_bug.cgi?id=1877045	external
https://www.cve.org/CVERecord?id=CVE-2019-8615	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8615	external
https://access.redhat.com/security/cve/CVE-2019-8619	self
https://bugzilla.redhat.com/show_bug.cgi?id=1877047	external
https://www.cve.org/CVERecord?id=CVE-2019-8619	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8619	external
https://access.redhat.com/security/cve/CVE-2019-8622	self
https://bugzilla.redhat.com/show_bug.cgi?id=1877048	external
https://www.cve.org/CVERecord?id=CVE-2019-8622	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8622	external
https://access.redhat.com/security/cve/CVE-2019-8623	self
https://bugzilla.redhat.com/show_bug.cgi?id=1877049	external
https://www.cve.org/CVERecord?id=CVE-2019-8623	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8623	external
https://access.redhat.com/security/cve/CVE-2019-8625	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876607	external
https://www.cve.org/CVERecord?id=CVE-2019-8625	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8625	external
https://webkitgtk.org/security/WSA-2019-0005.html	external
https://access.redhat.com/security/cve/CVE-2019-8644	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876626	external
https://www.cve.org/CVERecord?id=CVE-2019-8644	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8644	external
https://webkitgtk.org/security/WSA-2019-0004.html	external
https://access.redhat.com/security/cve/CVE-2019-8649	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876628	external
https://www.cve.org/CVERecord?id=CVE-2019-8649	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8649	external
https://access.redhat.com/security/cve/CVE-2019-8658	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876629	external
https://www.cve.org/CVERecord?id=CVE-2019-8658	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8658	external
https://access.redhat.com/security/cve/CVE-2019-8666	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876630	external
https://www.cve.org/CVERecord?id=CVE-2019-8666	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8666	external
https://access.redhat.com/security/cve/CVE-2019-8669	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876631	external
https://www.cve.org/CVERecord?id=CVE-2019-8669	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8669	external
https://access.redhat.com/security/cve/CVE-2019-8671	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876632	external
https://www.cve.org/CVERecord?id=CVE-2019-8671	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8671	external
https://access.redhat.com/security/cve/CVE-2019-8672	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876634	external
https://www.cve.org/CVERecord?id=CVE-2019-8672	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8672	external
https://access.redhat.com/security/cve/CVE-2019-8673	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876643	external
https://www.cve.org/CVERecord?id=CVE-2019-8673	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8673	external
https://access.redhat.com/security/cve/CVE-2019-8674	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876608	external
https://www.cve.org/CVERecord?id=CVE-2019-8674	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8674	external
https://access.redhat.com/security/cve/CVE-2019-8676	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876644	external
https://www.cve.org/CVERecord?id=CVE-2019-8676	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8676	external
https://access.redhat.com/security/cve/CVE-2019-8677	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876645	external
https://www.cve.org/CVERecord?id=CVE-2019-8677	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8677	external
https://access.redhat.com/security/cve/CVE-2019-8678	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876646	external
https://www.cve.org/CVERecord?id=CVE-2019-8678	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8678	external
https://access.redhat.com/security/cve/CVE-2019-8679	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876647	external
https://www.cve.org/CVERecord?id=CVE-2019-8679	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8679	external
https://access.redhat.com/security/cve/CVE-2019-8680	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876648	external
https://www.cve.org/CVERecord?id=CVE-2019-8680	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8680	external
https://access.redhat.com/security/cve/CVE-2019-8681	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876650	external
https://www.cve.org/CVERecord?id=CVE-2019-8681	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8681	external
https://access.redhat.com/security/cve/CVE-2019-8683	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876651	external
https://www.cve.org/CVERecord?id=CVE-2019-8683	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8683	external
https://access.redhat.com/security/cve/CVE-2019-8684	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876652	external
https://www.cve.org/CVERecord?id=CVE-2019-8684	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8684	external
https://access.redhat.com/security/cve/CVE-2019-8686	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876653	external
https://www.cve.org/CVERecord?id=CVE-2019-8686	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8686	external
https://access.redhat.com/security/cve/CVE-2019-8687	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876655	external
https://www.cve.org/CVERecord?id=CVE-2019-8687	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8687	external
https://access.redhat.com/security/cve/CVE-2019-8688	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876656	external
https://www.cve.org/CVERecord?id=CVE-2019-8688	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8688	external
https://access.redhat.com/security/cve/CVE-2019-8689	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876657	external
https://www.cve.org/CVERecord?id=CVE-2019-8689	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8689	external
https://access.redhat.com/security/cve/CVE-2019-8690	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876664	external
https://www.cve.org/CVERecord?id=CVE-2019-8690	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8690	external
https://access.redhat.com/security/cve/CVE-2019-8707	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876609	external
https://www.cve.org/CVERecord?id=CVE-2019-8707	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8707	external
https://access.redhat.com/security/cve/CVE-2019-8710	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876536	external
https://www.cve.org/CVERecord?id=CVE-2019-8710	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8710	external
https://webkitgtk.org/security/WSA-2019-0006.html	external
https://access.redhat.com/security/cve/CVE-2019-8719	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876610	external
https://www.cve.org/CVERecord?id=CVE-2019-8719	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8719	external
https://access.redhat.com/security/cve/CVE-2019-8720	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876611	external
https://www.cve.org/CVERecord?id=CVE-2019-8720	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8720	external
https://access.redhat.com/security/cve/CVE-2019-8726	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876612	external
https://www.cve.org/CVERecord?id=CVE-2019-8726	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8726	external
https://access.redhat.com/security/cve/CVE-2019-8733	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876613	external
https://www.cve.org/CVERecord?id=CVE-2019-8733	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8733	external
https://access.redhat.com/security/cve/CVE-2019-8735	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876614	external
https://www.cve.org/CVERecord?id=CVE-2019-8735	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8735	external
https://access.redhat.com/security/cve/CVE-2019-8743	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876537	external
https://www.cve.org/CVERecord?id=CVE-2019-8743	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8743	external
https://access.redhat.com/security/cve/CVE-2019-8763	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876615	external
https://www.cve.org/CVERecord?id=CVE-2019-8763	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8763	external
https://access.redhat.com/security/cve/CVE-2019-8764	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876540	external
https://www.cve.org/CVERecord?id=CVE-2019-8764	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8764	external
https://access.redhat.com/security/cve/CVE-2019-8765	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876542	external
https://www.cve.org/CVERecord?id=CVE-2019-8765	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8765	external
https://access.redhat.com/security/cve/CVE-2019-8766	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876543	external
https://www.cve.org/CVERecord?id=CVE-2019-8766	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8766	external
https://access.redhat.com/security/cve/CVE-2019-8768	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876616	external
https://www.cve.org/CVERecord?id=CVE-2019-8768	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8768	external
https://access.redhat.com/security/cve/CVE-2019-8769	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876617	external
https://www.cve.org/CVERecord?id=CVE-2019-8769	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8769	external
https://access.redhat.com/security/cve/CVE-2019-8771	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876619	external
https://www.cve.org/CVERecord?id=CVE-2019-8771	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8771	external
https://access.redhat.com/security/cve/CVE-2019-8782	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876545	external
https://www.cve.org/CVERecord?id=CVE-2019-8782	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8782	external
https://access.redhat.com/security/cve/CVE-2019-8783	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876548	external
https://www.cve.org/CVERecord?id=CVE-2019-8783	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8783	external
https://access.redhat.com/security/cve/CVE-2019-8808	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876549	external
https://www.cve.org/CVERecord?id=CVE-2019-8808	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8808	external
https://access.redhat.com/security/cve/CVE-2019-8811	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876550	external
https://www.cve.org/CVERecord?id=CVE-2019-8811	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8811	external
https://access.redhat.com/security/cve/CVE-2019-8812	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876552	external
https://www.cve.org/CVERecord?id=CVE-2019-8812	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8812	external
https://access.redhat.com/security/cve/CVE-2019-8813	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876553	external
https://www.cve.org/CVERecord?id=CVE-2019-8813	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8813	external
https://access.redhat.com/security/cve/CVE-2019-8814	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876554	external
https://www.cve.org/CVERecord?id=CVE-2019-8814	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8814	external
https://access.redhat.com/security/cve/CVE-2019-8815	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876555	external
https://www.cve.org/CVERecord?id=CVE-2019-8815	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8815	external
https://access.redhat.com/security/cve/CVE-2019-8816	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876556	external
https://www.cve.org/CVERecord?id=CVE-2019-8816	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8816	external
https://access.redhat.com/security/cve/CVE-2019-8819	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876590	external
https://www.cve.org/CVERecord?id=CVE-2019-8819	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8819	external
https://access.redhat.com/security/cve/CVE-2019-8820	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876591	external
https://www.cve.org/CVERecord?id=CVE-2019-8820	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8820	external
https://access.redhat.com/security/cve/CVE-2019-8821	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876592	external
https://www.cve.org/CVERecord?id=CVE-2019-8821	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8821	external
https://access.redhat.com/security/cve/CVE-2019-8822	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876593	external
https://www.cve.org/CVERecord?id=CVE-2019-8822	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8822	external
https://access.redhat.com/security/cve/CVE-2019-8823	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876594	external
https://www.cve.org/CVERecord?id=CVE-2019-8823	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8823	external
https://access.redhat.com/security/cve/CVE-2019-8835	self
https://bugzilla.redhat.com/show_bug.cgi?id=1816684	external
https://www.cve.org/CVERecord?id=CVE-2019-8835	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8835	external
https://webkitgtk.org/security/WSA-2020-0001.html	external
https://access.redhat.com/security/cve/CVE-2019-8844	self
https://bugzilla.redhat.com/show_bug.cgi?id=1816686	external
https://www.cve.org/CVERecord?id=CVE-2019-8844	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8844	external
https://access.redhat.com/security/cve/CVE-2019-8846	self
https://bugzilla.redhat.com/show_bug.cgi?id=1816678	external
https://www.cve.org/CVERecord?id=CVE-2019-8846	external
https://nvd.nist.gov/vuln/detail/CVE-2019-8846	external
https://access.redhat.com/security/cve/CVE-2019-11070	self
https://bugzilla.redhat.com/show_bug.cgi?id=1709289	external
https://www.cve.org/CVERecord?id=CVE-2019-11070	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11070	external
https://access.redhat.com/security/cve/CVE-2020-3862	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876516	external
https://www.cve.org/CVERecord?id=CVE-2020-3862	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3862	external
https://webkitgtk.org/security/WSA-2020-0002.html	external
https://access.redhat.com/security/cve/CVE-2020-3864	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876518	external
https://www.cve.org/CVERecord?id=CVE-2020-3864	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3864	external
https://access.redhat.com/security/cve/CVE-2020-3865	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876521	external
https://www.cve.org/CVERecord?id=CVE-2020-3865	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3865	external
https://access.redhat.com/security/cve/CVE-2020-3867	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876522	external
https://www.cve.org/CVERecord?id=CVE-2020-3867	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3867	external
https://access.redhat.com/security/cve/CVE-2020-3868	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876523	external
https://www.cve.org/CVERecord?id=CVE-2020-3868	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3868	external
https://access.redhat.com/security/cve/CVE-2020-3885	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876462	external
https://www.cve.org/CVERecord?id=CVE-2020-3885	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3885	external
https://webkitgtk.org/security/WSA-2020-0005.html	external
https://access.redhat.com/security/cve/CVE-2020-3894	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876463	external
https://www.cve.org/CVERecord?id=CVE-2020-3894	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3894	external
https://access.redhat.com/security/cve/CVE-2020-3895	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876465	external
https://www.cve.org/CVERecord?id=CVE-2020-3895	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3895	external
https://access.redhat.com/security/cve/CVE-2020-3897	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876468	external
https://www.cve.org/CVERecord?id=CVE-2020-3897	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3897	external
https://access.redhat.com/security/cve/CVE-2020-3899	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876470	external
https://www.cve.org/CVERecord?id=CVE-2020-3899	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3899	external
https://access.redhat.com/security/cve/CVE-2020-3900	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876472	external
https://www.cve.org/CVERecord?id=CVE-2020-3900	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3900	external
https://access.redhat.com/security/cve/CVE-2020-3901	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876473	external
https://www.cve.org/CVERecord?id=CVE-2020-3901	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3901	external
https://access.redhat.com/security/cve/CVE-2020-3902	self
https://bugzilla.redhat.com/show_bug.cgi?id=1876476	external
https://www.cve.org/CVERecord?id=CVE-2020-3902	external
https://nvd.nist.gov/vuln/detail/CVE-2020-3902	external
https://access.redhat.com/security/cve/CVE-2020-10018	self
https://bugzilla.redhat.com/show_bug.cgi?id=1811721	external
https://www.cve.org/CVERecord?id=CVE-2020-10018	external
https://nvd.nist.gov/vuln/detail/CVE-2020-10018	external
https://access.redhat.com/security/cve/CVE-2020-11793	self
https://bugzilla.redhat.com/show_bug.cgi?id=1829369	external
https://www.cve.org/CVERecord?id=CVE-2020-11793	external
https://nvd.nist.gov/vuln/detail/CVE-2020-11793	external
https://webkitgtk.org/security/WSA-2020-0004.html	external
https://access.redhat.com/security/cve/CVE-2021-30666	self
https://bugzilla.redhat.com/show_bug.cgi?id=1986877	external
https://www.cve.org/CVERecord?id=CVE-2021-30666	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30666	external
https://webkitgtk.org/security/WSA-2021-0004.html	external
https://access.redhat.com/security/cve/CVE-2021-30761	self
https://bugzilla.redhat.com/show_bug.cgi?id=1986894	external
https://www.cve.org/CVERecord?id=CVE-2021-30761	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30761	external
https://access.redhat.com/security/cve/CVE-2021-30762	self
https://bugzilla.redhat.com/show_bug.cgi?id=1986898	external
https://www.cve.org/CVERecord?id=CVE-2021-30762	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30762	external

JSON

To clipboard

Loading 6.8 MB of JSON…

CVE-2019-8597 (GCVE-0-2019-8597)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC

Impacted products

6 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:28.485Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:18.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8597",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8597",
    "datePublished": "2019-12-18T17:33:18.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:28.485Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8601 (GCVE-0-2019-8601)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

8 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC
https://support.apple.com/HT210122	x_refsource_MISC

Impacted products

7 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	watchOS	Affected: unspecified , < watchOS 5.2.1 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:28.282Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210122"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "watchOS 5.2.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:18.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210122"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8601",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "watchOS 5.2.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            },
            {
              "name": "https://support.apple.com/HT210122",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210122"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8601",
    "datePublished": "2019-12-18T17:33:18.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:28.282Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8607 (GCVE-0-2019-8607)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may result in the disclosure of process memory

Assigner

apple mitre root

References

8 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC
https://support.apple.com/HT210122	x_refsource_MISC

Impacted products

7 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	watchOS	Affected: unspecified , < watchOS 5.2.1 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:28.974Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210122"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "watchOS 5.2.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may result in the disclosure of process memory",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:18.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210122"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8607",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "watchOS 5.2.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may result in the disclosure of process memory"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            },
            {
              "name": "https://support.apple.com/HT210122",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210122"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8607",
    "datePublished": "2019-12-18T17:33:18.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:28.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8608 (GCVE-0-2019-8608)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC

Impacted products

6 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:28.285Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:18.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8608",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8608",
    "datePublished": "2019-12-18T17:33:18.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:28.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8609 (GCVE-0-2019-8609)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC

Impacted products

6 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:29.160Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:18.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8609",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8609",
    "datePublished": "2019-12-18T17:33:18.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:29.160Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8610 (GCVE-0-2019-8610)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC

Impacted products

6 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:28.461Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:18.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8610",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8610",
    "datePublished": "2019-12-18T17:33:18.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:28.461Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8611 (GCVE-0-2019-8611)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC

Impacted products

6 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:29.123Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:19.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8611",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8611",
    "datePublished": "2019-12-18T17:33:19.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:29.123Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8615 (GCVE-0-2019-8615)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC

Impacted products

6 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:28.359Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:19.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8615",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8615",
    "datePublished": "2019-12-18T17:33:19.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:28.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8619 (GCVE-0-2019-8619)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC

Impacted products

6 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:28.763Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:19.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8619",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8619",
    "datePublished": "2019-12-18T17:33:19.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:28.763Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-8622 (GCVE-0-2019-8622)

Vulnerability from cvelistv5 – Published: 2019-12-18 17:33 – Updated: 2024-08-04 21:24

Summary

Severity

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple mitre root

References

8 references

URL	Tags
https://support.apple.com/HT210118	x_refsource_MISC
https://support.apple.com/HT210119	x_refsource_MISC
https://support.apple.com/HT210120	x_refsource_MISC
https://support.apple.com/HT210123	x_refsource_MISC
https://support.apple.com/HT210124	x_refsource_MISC
https://support.apple.com/HT210125	x_refsource_MISC
https://support.apple.com/HT210212	x_refsource_MISC
https://support.apple.com/HT210122	x_refsource_MISC

Impacted products

7 products

Vendor	Product	Version
Apple	iOS	Affected: unspecified , < iOS 12.3 (custom)
Apple	macOS	Affected: unspecified , < macOS Mojave 10.14.5 (custom)
Apple	tvOS	Affected: unspecified , < tvOS 12.3 (custom)
Apple	watchOS	Affected: unspecified , < watchOS 5.2.1 (custom)
Apple	Safari	Affected: unspecified , < Safari 12.1.1 (custom)
Apple	iTunes for Windows	Affected: unspecified , < iTunes for Windows 12.9.5 (custom)
Apple	iCloud for Windows	Affected: unspecified , < iCloud for Windows 7.12 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:24:28.965Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210118"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210119"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210123"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210125"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210212"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT210122"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "macOS Mojave 10.14.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "tvOS 12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "watchOS 5.2.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "Safari 12.1.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iTunes for Windows 12.9.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iCloud for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "iCloud for Windows 7.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-18T17:33:19.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210118"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210119"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210123"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210125"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210212"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/HT210122"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2019-8622",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "macOS Mojave 10.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "tvOS 12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "watchOS 5.2.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "Safari 12.1.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iTunes for Windows 12.9.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iCloud for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "iCloud for Windows 7.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/HT210118",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210118"
            },
            {
              "name": "https://support.apple.com/HT210119",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210119"
            },
            {
              "name": "https://support.apple.com/HT210120",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210120"
            },
            {
              "name": "https://support.apple.com/HT210123",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210123"
            },
            {
              "name": "https://support.apple.com/HT210124",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210124"
            },
            {
              "name": "https://support.apple.com/HT210125",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210125"
            },
            {
              "name": "https://support.apple.com/HT210212",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210212"
            },
            {
              "name": "https://support.apple.com/HT210122",
              "refsource": "MISC",
              "url": "https://support.apple.com/HT210122"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2019-8622",
    "datePublished": "2019-12-18T17:33:19.000Z",
    "dateReserved": "2019-02-18T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:24:28.965Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2020_4035

CVE-2019-8597 (GCVE-0-2019-8597)

CVE-2019-8601 (GCVE-0-2019-8601)

CVE-2019-8607 (GCVE-0-2019-8607)

CVE-2019-8608 (GCVE-0-2019-8608)

CVE-2019-8609 (GCVE-0-2019-8609)

CVE-2019-8610 (GCVE-0-2019-8610)

CVE-2019-8611 (GCVE-0-2019-8611)

CVE-2019-8615 (GCVE-0-2019-8615)

CVE-2019-8619 (GCVE-0-2019-8619)

CVE-2019-8622 (GCVE-0-2019-8622)

Tags

Sightings

Nomenclature

Related by attack behaviour