A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pidginUpgrade pidgin-develUpgrade libpurpleUpgrade gnome-desktop3Upgrade gdk-pixbuf2Upgrade libpurple-develUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-xlib-devel | May 4, 2022 | Dec 18, 2019 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Dec 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4Upgrade webkitgtk4-docUpgrade webkitgtk4-develUpgrade webkitgtk4-jscUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-devel | Nov 12, 2020 | Dec 18, 2019 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jul 24, 2019 | Jul 24, 2019 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Jul 23, 2019 | Jul 23, 2019 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 12.1.2 | Jul 23, 2019 | Jul 23, 2019 |
| Centos_linux | — | Upgrade webkitgtk4-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gvfs-develUpgrade plymouth-theme-solarUpgrade gnome-desktop3-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade evince-libs-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade plymouth-theme-spinnerUpgrade libpurple-debuginfoUpgrade gvfs-mtpUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-settings-daemonUpgrade evince-browser-pluginUpgrade gvfs-afpUpgrade gvfs-gphoto2Upgrade plymouth-graphics-libs-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gvfs-mtp-debuginfoUpgrade pidgin-debuginfoUpgrade plymouth-plugin-throbgressUpgrade libpurple-perl-debuginfoUpgrade plymouth-core-libsUpgrade gsettings-desktop-schemasUpgrade gnome-shell-debugsourceUpgrade pidginUpgrade plymouth-scriptsUpgrade webkitgtk4-docUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade nautilusUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-apps-menuUpgrade SDL-develUpgrade gnome-shell-extension-window-listUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade SDL-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade evince-nautilus-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade plymouth-plugin-script-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-desktop3Upgrade gdk-pixbuf2-debuginfoUpgrade gnome-shell-extension-commonUpgrade gvfs-fuseUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-software-debuginfoUpgrade gdk-pixbuf2Upgrade gdmUpgrade webkit2gtk3-jscUpgrade gnome-tweaksUpgrade gvfs-archiveUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gvfs-afp-debuginfoUpgrade baobab-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade baobabUpgrade wayland-protocols-develUpgrade gnome-control-center-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-debuginfoUpgrade gnome-software-editorUpgrade evince-browser-plugin-debuginfoUpgrade file-roller-debugsourceUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade webkit2gtk3-develUpgrade plymouth-core-libs-debuginfoUpgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade evince-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gnome-shellUpgrade gnome-shell-extension-windowsNavigatorUpgrade plymouth-debugsourceUpgrade gjsUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-shell-extension-native-window-placementUpgrade mutter-debugsourceUpgrade gtk3-develUpgrade baobab-debugsourceUpgrade nautilus-debuginfoUpgrade gjs-tests-debuginfoUpgrade accountsservice-libsUpgrade gvfs-afc-debuginfoUpgrade libpurpleUpgrade evinceUpgrade finch-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gvfs-smb-debuginfoUpgrade gdm-debugsourceUpgrade gnome-classic-sessionUpgrade SDL-debuginfoUpgrade gvfsUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gnome-desktop3-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade mozjs60-debuginfoUpgrade plymouth-debuginfoUpgrade gtk3-debuginfoUpgrade gtk3-debugsourceUpgrade evince-debuginfoUpgrade pango-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade plymouth-plugin-scriptUpgrade plymouth-theme-fade-inUpgrade pidgin-debugsourceUpgrade webkitgtk4-jscUpgrade gdk-pixbuf2-debugsourceUpgrade gnome-shell-debuginfoUpgrade gvfs-smbUpgrade pango-develUpgrade gvfs-gphoto2-debuginfoUpgrade libpurple-tcl-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade webkitgtk4-jsc-develUpgrade gvfs-clientUpgrade gnome-desktop3-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gvfs-goaUpgrade plymouth-graphics-libsUpgrade plymouthUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade plymouth-devel-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-software-editor-debuginfoUpgrade nautilus-extensionsUpgrade gnome-remote-desktop-debugsourceUpgrade mozjs60-debugsourceUpgrade webkitgtk4-develUpgrade gtk3-devel-debuginfoUpgrade plymouth-plugin-throbgress-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade gvfs-afcUpgrade gnome-remote-desktopUpgrade gnome-software-debugsourceUpgrade accountsservice-debuginfoUpgrade accountsserviceUpgrade mozjs60Upgrade gvfs-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade gnome-softwareUpgrade gdk-pixbuf2-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade plymouth-plugin-space-flaresUpgrade gnome-shell-extension-no-hot-cornerUpgrade file-roller-debuginfoUpgrade file-rollerUpgrade evince-libsUpgrade pango-debuginfoUpgrade gdm-debuginfoUpgrade plymouth-plugin-labelUpgrade pangoUpgrade plymouth-theme-spinfinityUpgrade gvfs-client-debuginfoUpgrade gjs-debuginfoUpgrade pidgin-perl-debuginfoUpgrade mutterUpgrade mutter-tests-debuginfoUpgrade pango-tests-debuginfoUpgrade plymouth-theme-scriptUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade mutter-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gvfs-debugsourceUpgrade plymouth-system-themeUpgrade gtk3-immodule-ximUpgrade gnome-control-centerUpgrade plymouth-plugin-two-stepUpgrade plymouth-plugin-label-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-systemMonitorUpgrade gsettings-desktop-schemas-develUpgrade gjs-debugsourceUpgrade chrome-gnome-shellUpgrade gtk3Upgrade gvfs-goa-debuginfoUpgrade appstream-dataUpgrade webkitgtk4Upgrade gdk-pixbuf2-modules-debuginfoUpgrade SDLUpgrade gdk-pixbuf2-tests-debuginfoUpgrade webkit2gtk3Upgrade gnome-shell-extension-drive-menuUpgrade evince-nautilusUpgrade plymouth-theme-chargeUpgrade gvfs-fuse-debuginfo | Sep 17, 2020 | Dec 18, 2019 |
| Debian | — | Upgrade webkit2gtk | Oct 23, 2019 | Oct 23, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Aug 31, 2019 | Aug 30, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Sep 6, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.24.4-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Dec 18, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-develUpgrade webkitgtk4-docUpgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-jsc-devel | Oct 7, 2020 | Aug 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 18, 2019 |
| Redhat_linux | — | Upgrade gvfs-gphoto2-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade accountsservice-debugsourceUpgrade appstream-dataUpgrade gvfs-client-debuginfoUpgrade gtk3-immodule-ximUpgrade gvfs-afcUpgrade plymouth-plugin-labelUpgrade gjs-tests-debuginfoUpgrade file-roller-debuginfoUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3-debuginfoUpgrade plymouth-theme-chargeUpgrade gjs-develUpgrade webkitgtk4-docUpgrade gnome-softwareUpgrade webkit2gtk3-develUpgrade gdk-pixbuf2Upgrade gvfs-goa-debuginfoUpgrade gtk3-tests-debuginfoUpgrade pango-debugsourceUpgrade plymouth-theme-fade-inUpgrade gvfs-debugsourceUpgrade libpurple-tcl-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-drive-menuUpgrade pidgin-debuginfoUpgrade nautilus-develUpgrade gnome-shell-debugsourceUpgrade pidgin-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-software-editor-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gjs-debugsourceUpgrade mutter-debugsourceUpgrade gnome-software-debuginfoUpgrade libpurple-develUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-shell-extension-disable-screenshieldUpgrade accountsservice-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gvfs-smbUpgrade gnome-shell-extension-auto-move-windowsUpgrade gdk-pixbuf2-xlibUpgrade chrome-gnome-shellUpgrade plymouth-core-libs-debuginfoUpgrade plymouth-theme-spinfinityUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-no-hot-cornerUpgrade mutter-tests-debuginfoUpgrade gvfs-goaUpgrade gdk-pixbuf2-modulesUpgrade gnome-desktop3-develUpgrade evince-browser-pluginUpgrade evince-debugsourceUpgrade file-rollerUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-settings-daemon-debugsourceUpgrade gsettings-desktop-schemasUpgrade accountsservice-libs-debuginfoUpgrade webkitgtk4-debuginfoUpgrade gdk-pixbuf2-develUpgrade SDLUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-control-center-debuginfoUpgrade pangoUpgrade gnome-control-centerUpgrade SDL-debugsourceUpgrade plymouth-core-libsUpgrade webkitgtk4-jscUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-software-debugsourceUpgrade gvfsUpgrade plymouth-graphics-libsUpgrade gnome-tweaksUpgrade pango-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-software-editorUpgrade gjs-debuginfoUpgrade mutterUpgrade gdk-pixbuf2-xlib-develUpgrade mozjs60-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade webkitgtk4Upgrade plymouth-scriptsUpgrade evince-libsUpgrade gvfs-fuseUpgrade SDL-develUpgrade gnome-shell-extension-window-grouperUpgrade evince-libs-debuginfoUpgrade baobabUpgrade webkitgtk4-develUpgrade gtk3-debugsourceUpgrade plymouth-plugin-scriptUpgrade nautilusUpgrade gnome-control-center-filesystemUpgrade gdm-debugsourceUpgrade wayland-protocols-develUpgrade gnome-shell-extension-apps-menuUpgrade gdk-pixbuf2-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade nautilus-debugsourceUpgrade plymouth-plugin-label-debuginfoUpgrade evince-nautilusUpgrade webkit2gtk3-devel-debuginfoUpgrade mozjs60-debugsourceUpgrade evince-debuginfoUpgrade plymouth-graphics-libs-debuginfoUpgrade nautilus-debuginfoUpgrade file-roller-debugsourceUpgrade gnome-settings-daemonUpgrade gdmUpgrade accountsservice-libsUpgrade plymouth-debugsourceUpgrade gvfs-gphoto2Upgrade gtk3-develUpgrade pango-tests-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gvfs-archiveUpgrade plymouth-debuginfoUpgrade plymouth-plugin-two-step-debuginfoUpgrade evinceUpgrade plymouth-plugin-fade-throbberUpgrade gnome-shell-extension-launch-new-instanceUpgrade plymouth-plugin-two-stepUpgrade gnome-remote-desktopUpgrade gdk-pixbuf2-tests-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade gnome-shell-extension-panel-favoritesUpgrade plymouth-theme-scriptUpgrade webkitgtk4-jsc-develUpgrade plymouth-theme-spinnerUpgrade libpurple-debuginfoUpgrade pidgin-perl-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade mozjs60Upgrade gtk3-debuginfoUpgrade accountsservice-develUpgrade mutter-debuginfoUpgrade evince-nautilus-debuginfoUpgrade pidginUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-places-menuUpgrade libpurpleUpgrade gsettings-desktop-schemas-develUpgrade plymouth-system-themeUpgrade gvfs-clientUpgrade gvfs-fuse-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade baobab-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade mutter-develUpgrade plymouth-devel-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-debuginfoUpgrade pidgin-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade baobab-debugsourceUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gtk-update-icon-cacheUpgrade gdm-debuginfoUpgrade mozjs60-develUpgrade gnome-desktop3-debugsourceUpgrade gvfs-afpUpgrade gnome-remote-desktop-debugsourceUpgrade plymouth-theme-solarUpgrade plymouthUpgrade gvfs-develUpgrade gvfs-mtpUpgrade gvfs-afp-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gnome-shellUpgrade gnome-shell-extension-user-themeUpgrade gtk3Upgrade gvfs-archive-debuginfoNo solution existsUpgrade webkit2gtk3Upgrade SDL-debuginfoUpgrade libpurple-perl-debuginfoUpgrade nautilus-extensionsUpgrade gnome-classic-sessionUpgrade accountsserviceUpgrade gnome-desktop3-tests-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade plymouth-plugin-script-debuginfoUpgrade plymouth-plugin-throbgressUpgrade finch-debuginfoUpgrade pango-develUpgrade evince-browser-plugin-debuginfoUpgrade gjsUpgrade gnome-desktop3 | Sep 17, 2020 | Dec 18, 2019 |
| Rocky_linux | — | Upgrade gdk-pixbuf2Upgrade pangoUpgrade gnome-desktop3Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade libpurple-develUpgrade gdk-pixbuf2-develUpgrade pango-debuginfoUpgrade pidgin-debugsourceUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade gdk-pixbuf2-modulesUpgrade libpurple-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-debuginfoUpgrade libpurpleUpgrade gdk-pixbuf2-debugsourceUpgrade pango-debugsourceUpgrade pidginUpgrade pidgin-develUpgrade pango-develUpgrade pidgin-debuginfo | Mar 12, 2024 | Dec 18, 2019 |
| Suse | — | Upgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2webextension-4_0Upgrade libwebkit2gtk-4_0-37Upgrade webkit-jsc-4Upgrade libwebkit2gtk3-langUpgrade webkit2gtk3-minibrowserUpgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit2gtk3-plugin-process-gtk2Upgrade libwebkit2gtk-4_0-37-32bitUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade typelib-1_0-webkit2-4_0Upgrade libjavascriptcoregtk-4_0-18Upgrade typelib-1_0-javascriptcore-4_0 | Sep 11, 2019 | Aug 29, 2019 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Sep 12, 2019 | Aug 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub