CVE-2019-8515
N/A
N/A
Summary
A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apple | iOS | unspecified < iOS 12.2 | affected |
| Apple | tvOS | unspecified < tvOS 12.2 | affected |
| Apple | Safari | unspecified < Safari 12.1 | affected |
| Apple | iTunes for Windows | unspecified < iTunes 12.9.4 for Windows | affected |
| Apple | iCloud for Windows | unspecified < iCloud for Windows 7.11 | affected |
Weaknesses
- Processing maliciously crafted web content may disclose sensitive user information
ADP Enrichment
CVE Program Container
Additional References
- https://support.apple.com/HT209599
- https://support.apple.com/HT209601
- https://support.apple.com/HT209603
- https://support.apple.com/HT209604
- https://support.apple.com/HT209605
References
- https://support.apple.com/HT209599
- https://support.apple.com/HT209601
- https://support.apple.com/HT209603
- https://support.apple.com/HT209604
- https://support.apple.com/HT209605
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.