Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-8649

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvO

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple iOS

  • unspecified to < iOS 12.4affected

Apple macOS

  • unspecified to < macOS Mojave 10.14.6affected

Apple tvOS

  • unspecified to < tvOS 12.4affected

Apple Safari

  • unspecified to < Safari 12.1.2affected

Apple iTunes for Windows

  • unspecified to < iTunes for Windows 12.9.6affected

Apple iCloud for Windows

  • unspecified to < iCloud for Windows 7.13affected

Apple iCloud for Windows (Microsoft Store)

  • unspecified to < iCloud for Windows 10.6affected

References