CVEvulnerability
CVE-2019-8771
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-1021
Description
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.
Affected configurations
• apple safari (< 13.0.1)
• apple iphone os (< 13.0.)
Related
Weakness · CWE (1)
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness
References
- https://support.apple.com/en-us/HT210605 Vendor Advisory
- https://support.apple.com/en-us/HT210606 Vendor Advisory
- https://support.apple.com/en-us/HT210605 Vendor Advisory
- https://support.apple.com/en-us/HT210606 Vendor Advisory