CVE-2019-8754

A cross-origin issue existed with "iframe" elements

published October 27, 2020

CVSS
—
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A malicious HTML document may be able to render iframes with sensitive user information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.7th percentile
Published
2020-10-27T19:47Z
EPSS history
Timeline
  • 27 OCT 19:47Z
    A cross-origin issue existed with "iframe" elements
    cvelistv5