CVE-2019-8764

MEDIUM

watchOS < 6.1 - Universal Cross-Site Scripting via Malicious Web Content

Title source: llm

Description

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/HT210724

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/202003-22

Scores

CVSS v3 6.1

EPSS 0.0097

EPSS Percentile 58.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

apple/watchos < 6.1

webkitgtk/webkitgtk\+ < 2.26.4

Published Dec 18, 2019

Tracked Since Feb 18, 2026