A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-modulesUpgrade pidgin-develUpgrade pidginUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlibUpgrade gnome-desktop3Upgrade libpurple-develUpgrade gdk-pixbuf2-xlib-develUpgrade libpurpleUpgrade gdk-pixbuf2Upgrade gnome-desktop3-devel | May 4, 2022 | Dec 18, 2019 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Dec 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-develUpgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-docUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfo | Nov 12, 2020 | Dec 18, 2019 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 26, 2019 | Mar 26, 2019 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 12.1 | Mar 26, 2019 | Mar 26, 2019 |
| Centos_linux | — | Upgrade SDL-develUpgrade nautilus-debugsourceUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-shell-debugsourceUpgrade nautilus-debuginfoUpgrade file-roller-debugsourceUpgrade gnome-softwareUpgrade gvfs-afc-debuginfoUpgrade plymouth-plugin-labelUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade finch-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gdm-debugsourceUpgrade gtk3-immodule-ximUpgrade gtk3-immodules-debuginfoUpgrade webkit2gtk3-jscUpgrade plymouth-plugin-throbgressUpgrade plymouth-theme-solarUpgrade gnome-shell-extension-apps-menuUpgrade wayland-protocols-develUpgrade gnome-desktop3-tests-debuginfoUpgrade gnome-shellUpgrade gvfs-archive-debuginfoUpgrade gvfs-archiveUpgrade gdk-pixbuf2Upgrade plymouth-core-libsUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-debuginfoUpgrade SDL-debugsourceUpgrade webkit2gtk3-plugin-process-gtk2Upgrade pango-develUpgrade gjs-tests-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gvfs-smb-debuginfoUpgrade gnome-shell-extension-commonUpgrade nautilus-extensions-debuginfoUpgrade webkitgtk4-jscUpgrade accountsservice-debugsourceUpgrade gdmUpgrade plymouth-plugin-script-debuginfoUpgrade gnome-software-debuginfoUpgrade plymouth-graphics-libs-debuginfoUpgrade gnome-desktop3-develUpgrade evinceUpgrade plymouth-scriptsUpgrade gdk-pixbuf2-modulesUpgrade SDLUpgrade plymouth-plugin-two-step-debuginfoUpgrade gvfs-mtpUpgrade pango-debugsourceUpgrade baobabUpgrade plymouth-plugin-label-debuginfoUpgrade gtk3-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade chrome-gnome-shellUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-jsc-develUpgrade gvfs-afp-debuginfoUpgrade plymouth-graphics-libsUpgrade gnome-software-editorUpgrade gvfs-fuseUpgrade gnome-desktop3Upgrade gnome-shell-extension-user-themeUpgrade pidginUpgrade plymouth-debuginfoUpgrade mozjs60-debuginfoUpgrade mutter-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade evince-browser-plugin-debuginfoUpgrade plymouth-debugsourceUpgrade baobab-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade baobab-debugsourceUpgrade evince-debugsourceUpgrade evince-libs-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-classic-sessionUpgrade plymouth-theme-scriptUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade evince-libsUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-tweaksUpgrade nautilusUpgrade webkitgtk4-docUpgrade gdk-pixbuf2-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade webkitgtk4Upgrade gsettings-desktop-schemasUpgrade webkit2gtk3-jsc-debuginfoUpgrade plymouth-theme-spinfinityUpgrade gvfs-gphoto2Upgrade libpurpleUpgrade gnome-desktop3-debuginfoUpgrade gnome-control-center-debugsourceUpgrade appstream-dataUpgrade pidgin-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade evince-debuginfoUpgrade gvfs-goaUpgrade gtk3Upgrade gvfs-smbUpgrade gvfs-client-debuginfoUpgrade gnome-control-centerUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gvfs-debuginfoUpgrade gnome-settings-daemonUpgrade plymouth-theme-spinnerUpgrade webkitgtk4-debuginfoUpgrade gjs-debugsourceUpgrade plymouth-theme-fade-inUpgrade pango-tests-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade SDL-debuginfoUpgrade mozjs60Upgrade libpurple-perl-debuginfoUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gdk-pixbuf2-develUpgrade file-rollerUpgrade gnome-shell-extension-top-iconsUpgrade plymouth-devel-debuginfoUpgrade gdm-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade pidgin-perl-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gvfs-develUpgrade gvfs-clientUpgrade gtk3-devel-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gjsUpgrade accountsservice-libsUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-debugsourceUpgrade evince-browser-pluginUpgrade libpurple-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade file-roller-debuginfoUpgrade webkitgtk4-jsc-develUpgrade evince-nautilusUpgrade gjs-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade webkit2gtk3-develUpgrade plymouth-plugin-throbgress-debuginfoUpgrade webkit2gtk3Upgrade plymouth-core-libs-debuginfoUpgrade mutter-debuginfoUpgrade gtk3-tests-debuginfoUpgrade accountsserviceUpgrade accountsservice-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade mozjs60-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade pidgin-debugsourceUpgrade gvfsUpgrade gsettings-desktop-schemas-develUpgrade gvfs-afcUpgrade pangoUpgrade plymouth-plugin-fade-throbberUpgrade gnome-control-center-debuginfoUpgrade gtk-update-icon-cacheUpgrade plymouthUpgrade gnome-shell-extension-window-grouperUpgrade gvfs-afpUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade libpurple-tcl-debuginfoUpgrade mutterUpgrade gnome-control-center-filesystemUpgrade pango-debuginfoUpgrade plymouth-theme-chargeUpgrade webkit2gtk3-debugsourceUpgrade gnome-remote-desktopUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gtk3-debugsourceUpgrade gvfs-goa-debuginfoUpgrade gtk3-develUpgrade gnome-software-editor-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade plymouth-system-themeUpgrade plymouth-plugin-two-stepUpgrade plymouth-plugin-scriptUpgrade nautilus-extensionsUpgrade webkitgtk4-devel | Oct 1, 2020 | Dec 18, 2019 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Dec 18, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Jul 7, 2019 | Jul 6, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Sep 6, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-docUpgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-jsc-devel | Oct 7, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade gdk-pixbuf2Upgrade gnome-shell-extension-dash-to-dockUpgrade mozjs60-develUpgrade webkitgtk4Upgrade gtk-update-icon-cache-debuginfoUpgrade plymouth-plugin-throbgressUpgrade gnome-shell-extension-systemMonitorUpgrade webkitgtk4-docUpgrade gvfs-smbUpgrade gvfs-archive-debuginfoUpgrade SDLUpgrade gjs-debuginfoUpgrade gdmUpgrade gdm-debuginfoUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-remote-desktop-debugsourceUpgrade chrome-gnome-shellUpgrade gdk-pixbuf2-xlib-develUpgrade gjs-develUpgrade gnome-control-center-debugsourceUpgrade gvfs-archiveUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade plymouth-debuginfoUpgrade mutter-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-commonUpgrade pango-tests-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade evince-libsUpgrade gtk-update-icon-cacheUpgrade gvfs-afc-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade pango-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade evinceUpgrade gjs-tests-debuginfoUpgrade libpurple-debuginfoUpgrade gnome-desktop3Upgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-classic-sessionUpgrade gnome-desktop3-develUpgrade mutter-tests-debuginfoUpgrade evince-libs-debuginfoUpgrade gjs-debugsourceUpgrade plymouth-plugin-labelUpgrade webkit2gtk3-jsc-develUpgrade gtk3-immodule-ximUpgrade SDL-debugsourceUpgrade pidgin-debuginfoUpgrade gvfs-smb-debuginfoUpgrade plymouth-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade wayland-protocols-develUpgrade gvfs-gphoto2Upgrade plymouth-theme-spinnerUpgrade gnome-shell-extension-launch-new-instanceUpgrade pidginUpgrade gvfs-clientUpgrade gnome-shell-extension-workspace-indicatorUpgrade plymouth-theme-scriptUpgrade plymouth-graphics-libs-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade nautilus-debugsourceUpgrade pango-debugsourceUpgrade webkitgtk4-jscUpgrade gnome-shell-extension-no-hot-cornerUpgrade plymouth-plugin-script-debuginfoNo solution existsUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gjsUpgrade mutter-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade gnome-settings-daemonUpgrade plymouth-plugin-space-flares-debuginfoUpgrade mutterUpgrade gnome-shell-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade mutter-develUpgrade gdk-pixbuf2-xlibUpgrade plymouth-plugin-label-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gdk-pixbuf2-debugsourceUpgrade pango-develUpgrade gnome-software-editorUpgrade accountsservice-libsUpgrade accountsservice-debugsourceUpgrade evince-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade pangoUpgrade baobab-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade plymouth-core-libsUpgrade libpurple-develUpgrade webkit2gtk3Upgrade gvfs-debugsourceUpgrade gnome-software-debugsourceUpgrade baobabUpgrade SDL-develUpgrade plymouth-theme-fade-inUpgrade webkit2gtk3-debuginfoUpgrade accountsserviceUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade webkitgtk4-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gdk-pixbuf2-modulesUpgrade plymouth-theme-chargeUpgrade evince-browser-plugin-debuginfoUpgrade baobab-debugsourceUpgrade gvfs-afpUpgrade plymouth-theme-solarUpgrade file-rollerUpgrade webkit2gtk3-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-tweaksUpgrade mozjs60Upgrade webkit2gtk3-develUpgrade webkitgtk4-jsc-develUpgrade pidgin-develUpgrade gvfsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkitgtk4-debuginfoUpgrade evince-nautilus-debuginfoUpgrade pidgin-perl-debuginfoUpgrade plymouth-graphics-libsUpgrade gvfs-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade nautilus-extensionsUpgrade gnome-control-center-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade finch-debuginfoUpgrade gvfs-afcUpgrade appstream-dataUpgrade gtk3-devel-debuginfoUpgrade plymouth-theme-spinfinityUpgrade gvfs-fuse-debuginfoUpgrade pidgin-debugsourceUpgrade accountsservice-develUpgrade evince-debugsourceUpgrade nautilusUpgrade gvfs-gphoto2-debuginfoUpgrade gdm-debugsourceUpgrade gtk3Upgrade evince-browser-pluginUpgrade gvfs-mtpUpgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade plymouth-plugin-space-flaresUpgrade webkit2gtk3-jsc-debuginfoUpgrade nautilus-debuginfoUpgrade gdk-pixbuf2-develUpgrade libpurple-perl-debuginfoUpgrade gtk3-debugsourceUpgrade plymouthUpgrade libpurple-tcl-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade nautilus-develUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade file-roller-debuginfoUpgrade gnome-shell-extension-window-listUpgrade plymouth-core-libs-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-centerUpgrade gtk3-immodule-xim-debuginfoUpgrade evince-nautilusUpgrade plymouth-system-themeUpgrade gtk3-debuginfoUpgrade file-roller-debugsourceUpgrade SDL-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gvfs-goaUpgrade gdk-pixbuf2-tests-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade libpurpleUpgrade gtk3-develUpgrade gdk-pixbuf2-devel-debuginfoUpgrade mozjs60-debuginfoUpgrade gvfs-develUpgrade gvfs-fuseUpgrade plymouth-devel-debuginfoUpgrade mozjs60-debugsourceUpgrade plymouth-scriptsUpgrade gnome-remote-desktopUpgrade gnome-softwareUpgrade plymouth-plugin-two-stepUpgrade gnome-software-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-shellUpgrade plymouth-plugin-scriptUpgrade gnome-shell-extension-panel-favorites | Oct 1, 2020 | Dec 18, 2019 |
| Rocky_linux | — | Upgrade pidgin-debugsourceUpgrade pango-develUpgrade gdk-pixbuf2-xlib-develUpgrade pango-debuginfoUpgrade pango-debugsourceUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modules-debuginfoUpgrade pangoUpgrade pidgin-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gnome-desktop3Upgrade libpurple-develUpgrade gdk-pixbuf2-debugsourceUpgrade gnome-desktop3-debuginfoUpgrade libpurple-debuginfoUpgrade pidginUpgrade libpurpleUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2-debuginfoUpgrade pidgin-develUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2Upgrade gnome-desktop3-debugsource | Mar 12, 2024 | Dec 18, 2019 |
| Suse | — | Upgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_0-18Upgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit2gtk3-plugin-process-gtk2Upgrade typelib-1_0-webkit2-4_0Upgrade webkit-jsc-4Upgrade webkit2gtk3-minibrowserUpgrade webkit2gtk3-develUpgrade libwebkit2gtk-4_0-37Upgrade webkit2gtk-4_0-injected-bundlesUpgrade typelib-1_0-javascriptcore-4_0Upgrade libjavascriptcoregtk-4_0-18-32bit | May 7, 2019 | Apr 16, 2019 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Apr 25, 2019 | Apr 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub