CVE-2019-8788

HIGH

iPadOS < 13.2 - Data Exfiltration via URL Parsing Issue

Title source: llm

Description

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Improper URL processing may lead to data exfiltration.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/HT210721

Vendor Advisory x_refsource_misc

https://support.apple.com/HT210722

Scores

CVSS v3 7.5

EPSS 0.0122

EPSS Percentile 65.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-20

Status published

Products (3)

apple/ipados < 13.2

apple/iphone_os < 13.2

apple/mac_os_x < 10.15.1

Published Dec 18, 2019

Tracked Since Feb 18, 2026