{"id":"CVE-2019-8515","aliases":["DEBIAN-CVE-2019-8515","EUVD-2019-17905","GHSA-7wpr-8w56-gx6v","RHBA-2019:2261","SUSE-SU-2019:1137-1","SUSE-SU-2019:1155-1","UBUNTU-CVE-2019-8515","openSUSE-SU-2019:1374-1"],"status":"published","title":"A cross-origin issue existed with the fetch API. This was addressed with improved input...","description":"A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01225,"percentile":0.69013,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-200"],"published":"2019-05-03T09:29:28Z","modified":"2026-09-21T07:03:24Z","fixes":[{"ecosystem":"Debian:12","package":"webkit2gtk","fixed_in":["2.24.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.24.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.24.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","fixed_in":["2.22.6-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"webkitgtk4-plugin-process-gtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"webkitgtk4-plugin-process-gtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"webkitgtk4-plugin-process-gtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"webkitgtk4-plugin-process-gtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.7-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-3.24.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-3.24.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-2.41.5"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.6-0ubuntu0.18.04.1"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.1-lp150.2.19.1"}]}],"bundled":18}],"products":[{"vendor":"apple","product":"icloud"},{"vendor":"apple","product":"icloud for windows"},{"vendor":"apple","product":"ios"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"itunes"},{"vendor":"apple","product":"itunes for windows"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"},{"vendor":"cisco","product":"ios"}],"references":[{"url":"https://support.apple.com/HT209599","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/HT209601","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/HT209603","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/HT209604","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/HT209605","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8515","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7wpr-8w56-gx6v"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-8515","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2019:2261","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669482","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_2261.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7292","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7292","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-8503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8503","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-8515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8515","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-8518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719206","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8518","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-8523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8523","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8523","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191137-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1132256","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8563","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191155-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-8515","tags":["report"]},{"url":"https://webkitgtk.org/security/WSA-2019-0002.html","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CGMQTO45E47X7O5HB3O7ZWDQLHRQ7G2Q/#CGMQTO45E47X7O5HB3O7ZWDQLHRQ7G2Q","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-8515","description":"A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.","status":"published","published":"2019-12-18T17:33:16Z","modified":"2024-08-04T21:17:31.419Z","updated_at":"2026-11-02T14:20:21.703364Z"}],"euvd":[{"id":"EUVD-2019-17905","description":"A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.","status":"published","published":"2019-12-18T17:33:16Z","modified":"2024-08-04T21:17:31Z","updated_at":"2026-11-03T03:06:42.550766Z"}],"ghsa":[{"id":"GHSA-7wpr-8w56-gx6v","title":"A cross-origin issue existed with the fetch API. This was addressed with improved input...","description":"A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.","status":"published","published":"2022-05-24T17:04:10Z","modified":"2023-01-29T05:00:47Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:44:39.8002Z"}],"nvd":[{"id":"CVE-2019-8515","description":"A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.","status":"published","published":"2019-12-18T18:15:23.473Z","modified":"2026-06-17T02:42:04.077Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:40.258829Z"}],"osv":[{"id":"CVE-2019-8515","description":"A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.","status":"published","published":"2019-12-18T18:15:23.473Z","modified":"2026-03-15T22:32:03.087277Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:12.974481Z"},{"id":"DEBIAN-CVE-2019-8515","description":"A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.","status":"published","published":"2019-12-18T18:15:23.473Z","modified":"2026-09-21T07:03:24.42611007Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"RHBA-2019:2261","title":"Red Hat Bug Fix Advisory: webkitgtk4 bug fix update","status":"published","published":"2024-09-16T02:17:22Z","modified":"2026-06-27T10:06:38Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"UBUNTU-CVE-2019-8515","description":"A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.","status":"published","published":"2019-12-18T18:15:00Z","modified":"2026-04-22T12:21:27.228481Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:21.741399Z"},{"id":"openSUSE-SU-2019:1374-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 to version 2.24.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506,\n  CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536,\n  CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-11070\n  (bsc#1132256).\n \nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-05-10T11:29:13Z","modified":"2026-02-04T02:28:22.967544Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:1137-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 to version 2.24.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506,\n  CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536,\n  CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-11070\n  (bsc#1132256).\n ","status":"published","published":"2019-05-03T09:29:28Z","modified":"2026-02-04T03:52:49.117889Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1155-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 to version 2.24.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506,\n  CVE-2019-8515, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551,\n  CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-11070 (bsc#1132256).\n","status":"published","published":"2019-05-06T11:44:49Z","modified":"2026-02-04T04:39:07.833111Z","updated_at":"2026-11-02T15:53:45.926331Z"}]}}