A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-desktop3-develUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-desktop3Upgrade libpurple-develUpgrade gdk-pixbuf2Upgrade libpurpleUpgrade pidginUpgrade gdk-pixbuf2-xlibUpgrade pidgin-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-devel | May 4, 2022 | Dec 18, 2019 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Dec 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-jscUpgrade webkitgtk4-docUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfo | Nov 12, 2020 | Dec 18, 2019 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 26, 2019 | Mar 25, 2019 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 12.1 | Mar 26, 2019 | Mar 26, 2019 |
| Centos_linux | — | Upgrade baobabUpgrade plymouth-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade SDL-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade plymouth-scriptsUpgrade plymouth-graphics-libsUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gnome-software-editorUpgrade plymouth-plugin-script-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade pango-debugsourceUpgrade gvfs-mtpUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-desktop3-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-shell-debuginfoUpgrade gvfs-afp-debuginfoUpgrade evince-nautilus-debuginfoUpgrade nautilus-debuginfoUpgrade plymouth-core-libsUpgrade gnome-shell-extension-apps-menuUpgrade gvfs-fuseUpgrade pidginUpgrade plymouth-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade webkitgtk4-jscUpgrade nautilusUpgrade gvfs-mtp-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gvfs-archive-debuginfoUpgrade libpurpleUpgrade webkitgtk4-docUpgrade plymouth-plugin-label-debuginfoUpgrade gnome-tweaksUpgrade gdk-pixbuf2-debugsourceUpgrade pidgin-debuginfoUpgrade baobab-debugsourceUpgrade plymouth-theme-spinfinityUpgrade SDLUpgrade webkit2gtk3-jsc-debuginfoUpgrade baobab-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-native-window-placementUpgrade gsettings-desktop-schemasUpgrade gvfs-gphoto2Upgrade evince-browser-plugin-debuginfoUpgrade file-roller-debugsourceUpgrade evinceUpgrade webkit2gtk3-devel-debuginfoUpgrade accountsservice-debugsourceUpgrade gdmUpgrade gtk3-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-commonUpgrade gvfs-smb-debuginfoUpgrade webkitgtk4Upgrade gnome-shell-extension-workspace-indicatorUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-softwareUpgrade webkit2gtk3-jsc-develUpgrade mozjs60-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gnome-classic-sessionUpgrade appstream-dataUpgrade gjs-tests-debuginfoUpgrade gdm-debugsourceUpgrade plymouth-graphics-libs-debuginfoUpgrade gnome-shell-debugsourceUpgrade plymouth-plugin-labelUpgrade finch-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade mutter-debugsourceUpgrade gnome-desktop3-develUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gdk-pixbuf2-debuginfoUpgrade SDL-develUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade pango-develUpgrade gtk3-immodule-ximUpgrade gtk3-immodules-debuginfoUpgrade gdk-pixbuf2Upgrade gnome-shellUpgrade evince-debugsourceUpgrade evince-libsUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-disable-screenshieldUpgrade plymouth-theme-solarUpgrade gvfs-archiveUpgrade gdk-pixbuf2-modulesUpgrade plymouth-plugin-throbgressUpgrade gnome-desktop3Upgrade gnome-settings-daemon-debuginfoUpgrade wayland-protocols-develUpgrade plymouth-theme-scriptUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade plymouth-plugin-two-step-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2Upgrade chrome-gnome-shellUpgrade webkit2gtk3-jscUpgrade evince-libs-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gjs-debugsourceUpgrade gdk-pixbuf2-devel-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk3-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-auto-move-windowsUpgrade evince-nautilusUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-smbUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gtk3-tests-debuginfoUpgrade file-rollerUpgrade gdk-pixbuf2-tests-debuginfoUpgrade pango-tests-debuginfoUpgrade libpurple-perl-debuginfoUpgrade evince-debuginfoUpgrade SDL-debuginfoUpgrade mozjs60Upgrade webkitgtk4-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade gvfs-afpUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gsettings-desktop-schemas-develUpgrade gnome-control-center-debuginfoUpgrade gvfs-afcUpgrade gjsUpgrade libpurple-tcl-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gvfs-develUpgrade file-roller-debuginfoUpgrade gvfsUpgrade accountsservice-debuginfoUpgrade plymouth-theme-chargeUpgrade webkit2gtk3Upgrade pangoUpgrade gtk-update-icon-cacheUpgrade pidgin-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-window-listUpgrade accountsserviceUpgrade gdk-pixbuf2-develUpgrade plymouth-plugin-scriptUpgrade nautilus-extensionsUpgrade gvfs-clientUpgrade plymouth-theme-fade-inUpgrade gnome-settings-daemonUpgrade gdm-debuginfoUpgrade gjs-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gnome-remote-desktopUpgrade libpurple-debuginfoUpgrade accountsservice-libsUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-software-debugsourceUpgrade pidgin-perl-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-panel-favoritesUpgrade plymouth-plugin-two-stepUpgrade plymouth-system-themeUpgrade gnome-shell-extension-window-grouperUpgrade gnome-software-editor-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade gnome-desktop3-debugsourceUpgrade plymouthUpgrade gtk3-debugsourceUpgrade mozjs60-debugsourceUpgrade gvfs-debuginfoUpgrade gtk3Upgrade gvfs-gphoto2-debuginfoUpgrade webkitgtk4-develUpgrade webkit2gtk3-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gnome-control-center-filesystemUpgrade evince-browser-pluginUpgrade gvfs-goaUpgrade gvfs-fuse-debuginfoUpgrade mutterUpgrade plymouth-theme-spinnerUpgrade plymouth-plugin-space-flares-debuginfoUpgrade pango-debuginfoUpgrade gnome-control-centerUpgrade plymouth-devel-debuginfoUpgrade webkit2gtk3-develUpgrade webkitgtk4-jsc-develUpgrade plymouth-core-libs-debuginfoUpgrade mutter-debuginfoUpgrade gvfs-client-debuginfo | Oct 1, 2020 | Dec 18, 2019 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Dec 18, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Jul 7, 2019 | Jul 6, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Sep 6, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-docUpgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade webkitgtk4-jsc-devel | Oct 7, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade gnome-tweaksUpgrade mozjs60-debugsourceUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-control-centerUpgrade gvfs-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gvfs-mtpUpgrade gnome-software-editor-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade plymouth-devel-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-settings-daemon-debuginfoUpgrade finch-debuginfoUpgrade gnome-control-center-filesystemUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade plymouth-core-libs-debuginfoUpgrade gvfs-goaUpgrade gvfs-afcUpgrade webkitgtk4-debuginfoUpgrade plymouth-scriptsUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-remote-desktopUpgrade nautilus-extensionsUpgrade plymouth-system-themeUpgrade gnome-control-center-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gvfs-develUpgrade accountsservice-libs-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade plymouth-theme-spinfinityUpgrade plymouthUpgrade libpurpleUpgrade gvfs-gphoto2-debuginfoUpgrade nautilus-debuginfoUpgrade evince-nautilusUpgrade gvfsUpgrade gnome-shell-extension-auto-move-windowsUpgrade SDL-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gvfs-client-debuginfoUpgrade pidgin-debugsourceUpgrade nautilusUpgrade pidgin-develUpgrade evince-debugsourceUpgrade accountsservice-debuginfoUpgrade webkit2gtk3-develUpgrade gdk-pixbuf2-tests-debuginfoUpgrade file-roller-debuginfoUpgrade accountsservice-develUpgrade mozjs60Upgrade pidgin-perl-debuginfoUpgrade gnome-shell-extension-window-listUpgrade appstream-dataUpgrade plymouth-plugin-two-step-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gtk3-develUpgrade gvfs-fuse-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade gnome-shellUpgrade libpurple-tcl-debuginfoUpgrade plymouth-plugin-scriptUpgrade evince-nautilus-debuginfoUpgrade gnome-shell-debugsourceUpgrade plymouth-plugin-throbgress-debuginfoUpgrade plymouth-graphics-libsUpgrade libpurple-perl-debuginfoUpgrade file-roller-debugsourceUpgrade nautilus-develUpgrade webkitgtk4-jsc-develUpgrade gdm-debugsourceUpgrade plymouth-plugin-two-stepUpgrade plymouth-plugin-space-flaresUpgrade gnome-software-debuginfoUpgrade gtk3-debugsourceUpgrade gvfs-fuseUpgrade evince-browser-pluginUpgrade gdk-pixbuf2-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-softwareUpgrade gtk3Upgrade mozjs60-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-native-window-placementUpgrade nautilus-extensions-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gtk3-immodules-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade webkit2gtk3Upgrade SDL-develUpgrade baobabUpgrade libpurple-develUpgrade plymouth-plugin-labelUpgrade plymouth-graphics-libs-debuginfoUpgrade baobab-debuginfoUpgrade pidgin-debuginfoUpgrade pangoUpgrade gvfs-debugsourceUpgrade mutter-tests-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jscUpgrade gvfs-smbUpgrade gnome-shell-extension-launch-new-instanceUpgrade gdk-pixbuf2Upgrade gvfs-archive-debuginfoUpgrade plymouth-plugin-label-debuginfoUpgrade gvfs-gphoto2Upgrade gtk-update-icon-cacheUpgrade gjs-debugsourceUpgrade gtk3-immodule-ximUpgrade mutter-develUpgrade webkitgtk4-jscUpgrade pango-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade evince-libsUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade evince-libs-debuginfoUpgrade accountsservice-libsUpgrade SDLUpgrade gdk-pixbuf2-xlib-develUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gtk-update-icon-cache-debuginfoUpgrade gvfs-goa-debuginfoUpgrade mutter-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-software-editorUpgrade pango-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade baobab-debugsourceUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-desktop3Upgrade gdk-pixbuf2-debugsourceUpgrade plymouth-debuginfoUpgrade gnome-settings-daemonUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-debuginfoUpgrade plymouth-theme-chargeUpgrade gvfs-afpUpgrade file-rollerUpgrade mutterUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-dash-to-dockUpgrade gdmUpgrade webkitgtk4-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gvfs-archiveUpgrade plymouth-theme-fade-inUpgrade gnome-classic-sessionUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade plymouth-theme-spinnerUpgrade nautilus-debugsourceUpgrade plymouth-theme-scriptUpgrade gnome-desktop3-debugsourceUpgrade gvfs-afc-debuginfoUpgrade accountsservice-debugsourceUpgrade gjs-tests-debuginfoUpgrade pango-develUpgrade libpurple-debuginfoUpgrade mutter-debugsourceUpgrade gdk-pixbuf2-xlibUpgrade gvfs-mtp-debuginfoUpgrade gnome-desktop3-develUpgrade plymouth-plugin-fade-throbber-debuginfoNo solution existsUpgrade plymouth-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade evince-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gvfs-clientUpgrade gdm-debuginfoUpgrade wayland-protocols-develUpgrade pidginUpgrade plymouth-plugin-script-debuginfoUpgrade plymouth-theme-solarUpgrade gjsUpgrade gnome-remote-desktop-debugsourceUpgrade accountsserviceUpgrade gnome-control-center-debugsourceUpgrade chrome-gnome-shellUpgrade gjs-develUpgrade mozjs60-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-updates-dialogUpgrade SDL-debugsourceUpgrade gjs-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade webkitgtk4-docUpgrade webkitgtk4Upgrade plymouth-plugin-throbgressUpgrade gnome-software-debugsourceUpgrade evinceUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-places-menuUpgrade webkit2gtk3-debuginfoUpgrade pango-tests-debuginfoUpgrade plymouth-core-libsUpgrade gnome-shell-extension-common | Oct 1, 2020 | Dec 18, 2019 |
| Rocky_linux | — | Upgrade pango-debugsourceUpgrade gdk-pixbuf2-modulesUpgrade pidgin-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade pango-develUpgrade pango-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade pidgin-debugsourceUpgrade pangoUpgrade gnome-desktop3-develUpgrade gnome-desktop3-debuginfoUpgrade libpurpleUpgrade pidginUpgrade pidgin-develUpgrade gdk-pixbuf2Upgrade gnome-desktop3-debugsourceUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade libpurple-develUpgrade gdk-pixbuf2-debuginfoUpgrade libpurple-debuginfoUpgrade gnome-desktop3 | Mar 12, 2024 | Dec 18, 2019 |
| Suse | — | Upgrade libwebkit2gtk-4_0-37Upgrade webkit2gtk3-develUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk-4_0-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18Upgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-webkit2-4_0Upgrade webkit2gtk3-plugin-process-gtk2Upgrade libwebkit2gtk3-langUpgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit-jsc-4 | May 7, 2019 | Apr 16, 2019 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Apr 25, 2019 | Apr 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub