CVE-2019-8762

—

CVSS 3.1

6.1 medium

EPSS

<1%p51

Published

Oct 27, 2020 (Oct 27, 2020)

Modified

Jun 17, 2026

Description

A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross site scripting.

Vendors: apple
Products: icloud, itunes, safari, ipad os, iphone os, tvos
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.