CVE-2019-8754

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A malicious HTML document may be able to render iframes with sensitive user information.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-346

Affected software

No affected versions have been published.

Timeline

Published
Oct 27, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-87557.8A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to CVE-2019-87569.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloudCVE-2019-87572.5A race condition existed when reading and writing user preferences. This was addressed with improved state handling. This issue is fixed in CVE-2019-87587.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be abCVE-2019-87597.1An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, CVE-2019-87606.8This issue was addressed by improving Face ID machine learning models. This issue is fixed in iOS 13. A 3D model constructed to look like thCVE-2019-87615.5This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update CVE-2019-87626.1A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.CVE-2019-87638.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13, SaCVE-2019-87646.1A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content mCVE-2019-87658.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously cCVE-2019-87668.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0.
CVE-2019-8754: Medium severity, CVSS 6.5 | Vulnix