A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-webkit2gtk | May 8, 2020 | Dec 18, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-webkitgtk4amazon-linux-ami-2-upgrade-webkitgtk4-debuginfoamazon-linux-ami-2-upgrade-webkitgtk4-develamazon-linux-ami-2-upgrade-webkitgtk4-docamazon-linux-ami-2-upgrade-webkitgtk4-jscamazon-linux-ami-2-upgrade-webkitgtk4-jsc-devel | Nov 12, 2020 | Dec 18, 2019 | |
| Apple Itunes | apple-itunes-upgrade-latest | Oct 8, 2019 | Oct 8, 2019 | |
| Apple Safari | apple-safari-upgrade-13apple-safari-windows-uninstall | Oct 9, 2019 | Oct 9, 2019 | |
| Centos_linux | — | centos-upgrade-webkitgtk4centos-upgrade-webkitgtk4-debuginfocentos-upgrade-webkitgtk4-develcentos-upgrade-webkitgtk4-doccentos-upgrade-webkitgtk4-jsccentos-upgrade-webkitgtk4-jsc-devel | Oct 1, 2020 | Dec 18, 2019 |
| Debian | debian-upgrade-webkit2gtk | Nov 4, 2019 | Nov 4, 2019 | |
| Freebsd | freebsd-upgrade-package-webkit2-gtk3 | Nov 1, 2019 | Oct 31, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-webkit-gtk | Mar 16, 2020 | Dec 18, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-desktop-webkitgtk4-2-26-4-11-4-21-0-1-69-0 | Jan 19, 2021 | Dec 18, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-webkitgtk4oracle-linux-upgrade-webkitgtk4-develoracle-linux-upgrade-webkitgtk4-docoracle-linux-upgrade-webkitgtk4-jscoracle-linux-upgrade-webkitgtk4-jsc-devel | Oct 7, 2020 | Oct 29, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-webkitgtk4redhat-upgrade-webkitgtk4-debuginforedhat-upgrade-webkitgtk4-develredhat-upgrade-webkitgtk4-docredhat-upgrade-webkitgtk4-jscredhat-upgrade-webkitgtk4-jsc-devel | Oct 1, 2020 | Dec 18, 2019 | |
| Suse | — | suse-upgrade-libjavascriptcoregtk-4_0-18suse-upgrade-libjavascriptcoregtk-4_0-18-32bitsuse-upgrade-libwebkit2gtk-4_0-37suse-upgrade-libwebkit2gtk-4_0-37-32bitsuse-upgrade-libwebkit2gtk3-langsuse-upgrade-typelib-1_0-javascriptcore-4_0suse-upgrade-typelib-1_0-webkit2-4_0suse-upgrade-typelib-1_0-webkit2webextension-4_0suse-upgrade-webkit-jsc-4suse-upgrade-webkit2gtk-4_0-injected-bundlessuse-upgrade-webkit2gtk3-develsuse-upgrade-webkit2gtk3-minibrowser | Dec 3, 2019 | Oct 29, 2019 |
| Ubuntu | ubuntu-upgrade-webkit2gtk | Nov 19, 2024 | Dec 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub