VulnerabilityModified
CVE-2019-8769
Visiting a maliciously crafted website may reveal browsing history.
MEDIUM 4.3EPSS 1.24%
Does this matter?
Lower severity and a low EPSS score (1.24%). Track it; it rarely justifies an emergency change on its own.
Description
An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- EPSS
- 1.24% probability · 67th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipados · apple/iphone os · apple/mac os x
- Source
- product-security@apple.com
References
- https://security.gentoo.org/glsa/202003-22Third Party Advisory
- https://support.apple.com/HT210634Vendor Advisory
- https://security.gentoo.org/glsa/202003-22Third Party Advisory
- https://support.apple.com/HT210634Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.