Skip to content
OpenAdvisories
Unscored CVE-2019-8754 EUVD-2019-18144GHSA-xwxr-6p65-6chj

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in …

Published Oct 27, 2020 · Updated Aug 4, 2024 · Assigned by apple

Description

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A malicious HTML document may be able to render iframes with sensitive user information.

Affected products

VendorProductAffectedFixed
Apple macOS unspecified – < 10.15 10.15

References