CVE-2019-8570

MEDIUM

iCloud < 7.10 - Information Disclosure via Malicious Web Content

Title source: llm
STIX 2.1

Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, iCloud for Windows 7.10, iTunes 12.9.3 for Windows, Safari 12.0.3, tvOS 12.1.2. Processing maliciously crafted web content may disclose sensitive user information.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209443
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209447
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209449
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209450
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209451

Scores

CVSS v3 6.5
EPSS 0.0261
EPSS Percentile 83.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

Status published
Products (5)
apple/icloud < 7.10
apple/iphone_os < 12.1.3
apple/itunes < 12.9.3
apple/safari < 12.0.3
apple/tvos < 12.1.2
Published Oct 27, 2020
Tracked Since Feb 18, 2026