A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpurple-develUpgrade pidgin-develUpgrade gnome-desktop3-develUpgrade pidginUpgrade gnome-desktop3Upgrade libpurpleUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlib | May 4, 2022 | Dec 18, 2019 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Dec 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jscUpgrade webkitgtk4-docUpgrade webkitgtk4-develUpgrade webkitgtk4 | Nov 12, 2020 | Dec 18, 2019 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jul 24, 2019 | Jul 24, 2019 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Jul 23, 2019 | Jul 23, 2019 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 12.1.2 | Jul 23, 2019 | Jul 23, 2019 |
| Centos_linux | — | Upgrade gtk3-immodule-ximUpgrade pidgin-debugsourceUpgrade gvfs-smbUpgrade gjs-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade plymouth-plugin-two-stepUpgrade chrome-gnome-shellUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade plymouth-system-themeUpgrade SDLUpgrade webkitgtk4Upgrade mutter-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade plymouth-plugin-label-debuginfoUpgrade gnome-control-centerUpgrade plymouth-plugin-labelUpgrade gvfs-client-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade evince-nautilusUpgrade gnome-softwareUpgrade webkitgtk4-jsc-develUpgrade plymouth-theme-spinfinityUpgrade webkit2gtk3Upgrade nautilus-extensions-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade pidgin-perl-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade plymouth-theme-chargeUpgrade gnome-software-editor-debuginfoUpgrade nautilus-extensionsUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade mutterUpgrade file-rollerUpgrade gnome-desktop3-debugsourceUpgrade gvfs-goaUpgrade plymouth-theme-scriptUpgrade file-roller-debuginfoUpgrade evince-libsUpgrade pango-tests-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-devel-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade pango-develUpgrade nautilus-debugsourceUpgrade plymouthUpgrade mozjs60-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gvfs-goa-debuginfoUpgrade plymouth-graphics-libsUpgrade gvfs-debuginfoUpgrade webkitgtk4-develUpgrade gvfs-clientUpgrade plymouth-devel-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade libpurple-tcl-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade evince-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-debuginfoUpgrade gtk3Upgrade gnome-shell-extension-no-hot-cornerUpgrade accountsserviceUpgrade accountsservice-debuginfoUpgrade gdk-pixbuf2-develUpgrade appstream-dataUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gtk3-devel-debuginfoUpgrade webkitgtk4-jscUpgrade gnome-software-debugsourceUpgrade gvfs-afcUpgrade pango-debuginfoUpgrade gnome-remote-desktopUpgrade pango-debugsourceUpgrade plymouth-plugin-space-flaresUpgrade gjs-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade gdm-debuginfoUpgrade pangoUpgrade plymouth-plugin-scriptUpgrade plymouth-theme-fade-inUpgrade gvfs-fuse-debuginfoUpgrade mozjs60Upgrade mutter-tests-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-shell-extension-window-grouperUpgrade gvfs-mtpUpgrade plymouth-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade plymouth-theme-solarUpgrade plymouth-graphics-libs-debuginfoUpgrade gdmUpgrade gvfs-mtp-debuginfoUpgrade plymouth-scriptsUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-commonUpgrade plymouth-plugin-throbgressUpgrade libpurple-perl-debuginfoUpgrade gnome-shellUpgrade nautilus-debuginfoUpgrade webkitgtk4-docUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade accountsservice-libsUpgrade plymouth-theme-spinnerUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gvfs-smb-debuginfoUpgrade nautilusUpgrade libpurple-debuginfoUpgrade SDL-develUpgrade plymouth-plugin-space-flares-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade libpurpleUpgrade mozjs60-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gnome-desktop3-develUpgrade mutter-debugsourceUpgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-desktop3-debuginfoUpgrade evince-libs-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-software-editorUpgrade gnome-control-center-debuginfoUpgrade gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade evince-browser-plugin-debuginfoUpgrade plymouth-core-libs-debuginfoUpgrade gjsUpgrade gjs-tests-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gvfs-archive-debuginfoUpgrade pidginUpgrade webkit2gtk3-jscUpgrade gsettings-desktop-schemasUpgrade SDL-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-window-listUpgrade plymouth-plugin-script-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade evince-nautilus-debuginfoUpgrade gnome-desktop3Upgrade gtk3-immodules-debuginfoUpgrade gdm-debugsourceUpgrade gvfs-develUpgrade SDL-debuginfoUpgrade gtk3-debuginfoUpgrade finch-debuginfoUpgrade gnome-control-center-debugsourceUpgrade evince-debugsourceUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gnome-classic-sessionUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gvfsUpgrade file-roller-debugsourceUpgrade plymouth-debuginfoUpgrade gdk-pixbuf2Upgrade gnome-shell-extension-top-iconsUpgrade plymouth-core-libsUpgrade gnome-tweaksUpgrade baobabUpgrade webkit2gtk3-debuginfoUpgrade wayland-protocols-develUpgrade gtk3-develUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-shell-extension-desktop-iconsUpgrade webkitgtk4-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-settings-daemonUpgrade webkit2gtk3-devel-debuginfoUpgrade baobab-debuginfoUpgrade evinceUpgrade gvfs-afp-debuginfoUpgrade webkit2gtk3-develUpgrade gvfs-archiveUpgrade gtk3-immodule-xim-debuginfoUpgrade pidgin-debuginfoUpgrade gvfs-gphoto2Upgrade gvfs-fuseUpgrade gvfs-afpUpgrade evince-browser-pluginUpgrade baobab-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfo | Sep 17, 2020 | Dec 18, 2019 |
| Debian | — | Upgrade webkit2gtk | Oct 23, 2019 | Oct 23, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Aug 31, 2019 | Aug 30, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Sep 6, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.24.4-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Dec 18, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-develUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade webkitgtk4-doc | Oct 7, 2020 | Aug 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 18, 2019 |
| Redhat_linux | — | Upgrade gjs-tests-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-jsc-develUpgrade accountsservice-debugsourceUpgrade plymouth-plugin-labelUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-software-editor-debuginfoUpgrade gnome-softwareUpgrade appstream-dataUpgrade gvfs-client-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gdk-pixbuf2Upgrade gnome-shell-extension-top-iconsUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gjs-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade gvfs-goa-debuginfoUpgrade plymouth-theme-spinfinityUpgrade pango-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade file-roller-debuginfoUpgrade gvfs-goaUpgrade pidgin-debugsourceUpgrade evince-libsUpgrade plymouth-scriptsUpgrade webkitgtk4-debuginfoUpgrade pidgin-debuginfoUpgrade gjs-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade plymouth-graphics-libsUpgrade mozjs60-debuginfoUpgrade pango-debugsourceUpgrade plymouth-core-libsUpgrade SDLUpgrade gvfs-fuseUpgrade webkitgtk4Upgrade pangoUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gdk-pixbuf2-modules-debuginfoUpgrade webkit2gtk3-jscUpgrade plymouth-core-libs-debuginfoUpgrade gnome-tweaksUpgrade gvfs-debugsourceUpgrade evince-browser-pluginUpgrade SDL-debugsourceUpgrade gnome-software-editorUpgrade file-rollerUpgrade mutter-tests-debuginfoUpgrade evince-debugsourceUpgrade gdk-pixbuf2-modulesUpgrade gnome-shell-extension-commonUpgrade gnome-desktop3-develUpgrade plymouth-plugin-throbgress-debuginfoUpgrade webkit2gtk3-develUpgrade plymouth-theme-fade-inUpgrade webkitgtk4-jscUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-window-listUpgrade gvfs-smb-debuginfoUpgrade gnome-software-debugsourceUpgrade gsettings-desktop-schemasUpgrade gdk-pixbuf2-develUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-software-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade gjs-develUpgrade gvfsUpgrade gvfs-smbUpgrade gvfs-afcUpgrade accountsservice-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade gnome-control-center-debuginfoUpgrade chrome-gnome-shellUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-shell-extension-updates-dialogUpgrade libpurple-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk3-immodule-ximUpgrade libpurple-tcl-debuginfoUpgrade webkitgtk4-docUpgrade mutter-debugsourceUpgrade gnome-control-centerUpgrade plymouth-theme-chargeUpgrade nautilus-develUpgrade gnome-settings-daemon-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade mutterUpgrade gdk-pixbuf2-debuginfoUpgrade evince-debuginfoUpgrade plymouthUpgrade gnome-shell-extension-places-menuUpgrade SDL-develUpgrade nautilus-extensionsUpgrade gnome-shell-extension-desktop-iconsUpgrade evince-nautilusUpgrade gdk-pixbuf2-debugsourceUpgrade plymouth-plugin-throbgressUpgrade gdm-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade pidgin-develUpgrade gnome-shell-extension-native-window-placementUpgrade nautilus-debugsourceUpgrade mutter-develUpgrade plymouth-graphics-libs-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade nautilus-debuginfoUpgrade plymouth-theme-spinnerUpgrade plymouth-theme-solarUpgrade gtk3-immodules-debuginfoUpgrade plymouth-system-themeUpgrade gvfs-clientUpgrade gvfs-gphoto2Upgrade gnome-settings-daemonUpgrade webkit2gtk3Upgrade plymouth-theme-scriptUpgrade plymouth-plugin-space-flaresUpgrade gvfs-afc-debuginfoUpgrade gtk3Upgrade gnome-shellUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-panel-favoritesUpgrade plymouth-plugin-two-stepUpgrade gdk-pixbuf2-tests-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkitgtk4-jsc-develUpgrade gvfs-afp-debuginfoUpgrade gvfs-archive-debuginfoUpgrade SDL-debuginfoUpgrade gnome-remote-desktopUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade file-roller-debugsourceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk3-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade libpurple-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade mutter-debuginfoUpgrade mozjs60Upgrade accountsservice-develUpgrade pidginUpgrade gvfs-mtp-debuginfoUpgrade pidgin-perl-debuginfoUpgrade libpurpleUpgrade mozjs60-debugsourceUpgrade libpurple-perl-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkit2gtk3-devel-debuginfoUpgrade mozjs60-develUpgrade gnome-desktop3-debugsourceUpgrade gvfs-afpUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gvfs-develUpgrade plymouth-devel-debuginfoUpgrade plymouth-plugin-label-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gvfs-mtpUpgrade pango-develUpgrade gnome-control-center-filesystemUpgrade wayland-protocols-develUpgrade plymouth-plugin-scriptUpgrade plymouth-debugsourceUpgrade gnome-desktop3Upgrade plymouth-debuginfoUpgrade pango-tests-debuginfoUpgrade accountsservice-libsUpgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade evince-libs-debuginfoUpgrade gjsUpgrade gdmUpgrade gvfs-archiveUpgrade webkitgtk4-develUpgrade gtk3-debugsourceUpgrade baobabUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-apps-menuUpgrade evinceUpgrade gvfs-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade baobab-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade baobab-debugsourceUpgrade finch-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-classic-sessionUpgrade accountsserviceUpgrade gtk3-develUpgrade gtk3-immodule-xim-debuginfoUpgrade nautilusUpgrade gdm-debugsourceNo solution existsUpgrade gnome-desktop3-tests-debuginfoUpgrade plymouth-plugin-script-debuginfo | Sep 17, 2020 | Dec 18, 2019 |
| Rocky_linux | — | Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gnome-desktop3Upgrade gnome-desktop3-develUpgrade libpurple-develUpgrade gdk-pixbuf2-develUpgrade pidgin-debugsourceUpgrade gdk-pixbuf2-xlib-develUpgrade pangoUpgrade gdk-pixbuf2Upgrade pango-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade pango-debugsourceUpgrade gnome-desktop3-debugsourceUpgrade gdk-pixbuf2-xlibUpgrade pidgin-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade pidginUpgrade pidgin-develUpgrade pango-develUpgrade gdk-pixbuf2-modulesUpgrade libpurpleUpgrade gdk-pixbuf2-debuginfoUpgrade libpurple-debuginfo | Mar 12, 2024 | Dec 18, 2019 |
| Suse | — | Upgrade libwebkit2gtk-4_0-37-32bitUpgrade webkit2gtk3-minibrowserUpgrade webkit2gtk3-plugin-process-gtk2Upgrade webkit2gtk-4_0-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18Upgrade typelib-1_0-webkit2-4_0Upgrade webkit-jsc-4Upgrade typelib-1_0-javascriptcore-4_0Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk3-langUpgrade libwebkit2gtk-4_0-37Upgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2webextension-4_0 | Sep 11, 2019 | Aug 29, 2019 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Sep 12, 2019 | Aug 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub