CVE-2019-8753

MEDIUM

iPhone OS <13.1, macOS <10.15, tvOS <13, watchOS <6.0 - Cross-Site Scripting

Title source: llm

Description

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. Processing maliciously crafted web content may lead to a cross site scripting attack.

References (4)

Core 4

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210634

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210604

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210606

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210607

Scores

CVSS v3 6.1

EPSS 0.0065

EPSS Percentile 47.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (4)

apple/iphone_os < 13.1

apple/mac_os_x < 10.15

apple/tvos < 13

apple/watchos < 6.0

Published Oct 27, 2020

Tracked Since Feb 18, 2026