CVE-2019-8769 — Sensitive Information Exposure in Apple

Vendor	Product	Version range	Fixed in
apple	ios	>= unspecified < iOS 13.1 and iPadOS 13.1	iOS 13.1 and iPadOS 13.1
apple	ios_13.1_and_ipados	—	—
apple	ipados	< 13.1	13.1
apple	iphone_os	< 13.1	13.1
apple	mac_os_x	< 10.15	10.15
apple	macos	>= unspecified < macOS Catalina 10.15	macOS Catalina 10.15
apple	macos_catalina	—	—
debian	webkit2gtk	< webkit2gtk 2.26.0-1 (bookworm)	webkit2gtk 2.26.0-1 (bookworm)

GHSA

GHSA-x3pj-hqmh-9r9q: An issue existed in the drawing of web page elements

ghsa_unreviewed·2022-05-24

CVE-2019-8769 [MEDIUM] CWE-200 GHSA-x3pj-hqmh-9r9q: An issue existed in the drawing of web page elements An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history.

OSV

CVE-2019-8769: An issue existed in the drawing of web page elements

osv·2019-12-18·CVSS 4.3

CVE-2019-8769 [MEDIUM] CVE-2019-8769: An issue existed in the drawing of web page elements An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history.

Ubuntu

WebKitGTK+ vulnerabilities

vendor_ubuntu·2019-11-07

CVE-2019-8625 WebKitGTK+ vulnerabilities Title: WebKitGTK+ vulnerabilities Summary: Several security issues were fixed in WebKitGTK+. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Instructions: This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK+, such as Epiphany, to make all the necessary changes.

Red Hat

webkitgtk: Websites could reveal browsing history

vendor_redhat·2019-10-29·CVSS 4.3

CVE-2019-8769 [MEDIUM] webkitgtk: Websites could reveal browsing history webkitgtk: Websites could reveal browsing history An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history. Package: webkitgtk (Red Hat Enterprise Linux 6) - Out of support scope Package: webkitgtk3 (Red Hat Enterprise Linux 7) - Will not fix

Apple

CVE-2019-8769: macOS Catalina 10.15

vendor_apple·2019-10-07·CVSS 4.3

CVE-2019-8769 [MEDIUM] CVE-2019-8769: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8769 Component: WebKit Impact: Visiting a maliciously crafted website may reveal browsing history Description: An issue existed in the drawing of web page elements. The issue was addressed with improved logic.

Apple

CVE-2019-8769: iOS 13.1 and iPadOS 13.1

vendor_apple·2019-09-24·CVSS 4.3

CVE-2019-8769 [MEDIUM] CVE-2019-8769: iOS 13.1 and iPadOS 13.1 Apple Security Update: About the security content of iOS 13.1 and iPadOS 13.1 Product: iOS 13.1 and iPadOS Version: 13.1 CVE: CVE-2019-8769 Component: WebKit Impact: Visiting a maliciously crafted website may reveal browsing history Description: An issue existed in the drawing of web page elements. The issue was addressed with improved logic.

Debian

CVE-2019-8769: webkit2gtk - An issue existed in the drawing of web page elements. The issue was addressed wi...

vendor_debian·2019·CVSS 4.3

CVE-2019-8769 [MEDIUM] CVE-2019-8769: webkit2gtk - An issue existed in the drawing of web page elements. The issue was addressed wi... An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history. Scope: local bookworm: resolved (fixed in 2.26.0-1) bullseye: resolved (fixed in 2.26.0-1) forky: resolved (fixed in 2.26.0-1) sid: resolved (fixed in 2.26.0-1) trixie: resolved (fixed in 2.26.0-1)

CVE-2019-8769: An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS…

Affected

CVSS provenance