CVE-2019-8768: Medium severity Apple macOS Catalina vulnerability
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items.
Other sources
WebKit. "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion.
WebKit. "Clear History and Website Data" did not fully clear the history. The issue was addressed with improved data deletion.
WebKitGTK Security Advisory WSA-2019-0005 describes the following issue:
CVE-2019-8768
Impact: A user may be unable to delete browsing history items. Description: “Clear History and Website Data” did not clear the history. The issue was addressed with improved data deletion.
Versions affected: WebKitGTK before 2.24.0 and WPE WebKit before 2.24.0.
— Red Hat
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/webkitgtkto a version that resolves this vulnerability.Fixed in 2.24.0 - Upgrade
Upgrade
macOS Catalinato a version that resolves this vulnerability.Fixed in 10.15 - Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 13 - Upgrade
Upgrade
alpine/webkit2gtkto a version that resolves this vulnerability.Fixed in 2.24.4-r0 - Upgrade
Upgrade
macOSto a version that resolves this vulnerability.Fixed in 10.15 - Upgrade
Upgrade
WebKitGTKto a version that resolves this vulnerability.Fixed in 2.24.0 - Upgrade
Upgrade
WPE WebKitto a version that resolves this vulnerability.Fixed in 2.24.0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-8748
- CVE-2019-11041
- CVE-2019-11042
- CVE-2019-8706
- CVE-2019-8850
- CVE-2019-8774
- CVE-2019-8753
- CVE-2019-8705
- CVE-2019-8592
- CVE-2019-8741
- CVE-2019-8825
- CVE-2019-8757
- CVE-2019-8736
- CVE-2019-8767
- CVE-2019-8737
- CVE-2019-8776
- CVE-2019-8509
- CVE-2019-8746
- CVE-2018-12152
- CVE-2018-12153
- CVE-2018-12154
- CVE-2019-8759
- CVE-2019-8758
- CVE-2019-8755
- CVE-2019-8703
- CVE-2019-8809
- CVE-2019-8744
- CVE-2019-8717
- CVE-2019-8709
- CVE-2019-8781
- CVE-2019-8749
- CVE-2019-8756
- CVE-2019-8750
- CVE-2019-8799
- CVE-2019-8826
- CVE-2019-8730
- CVE-2019-8772
- CVE-2019-8708
- CVE-2019-8715
- CVE-2019-8855
- CVE-2019-8770
- CVE-2019-8701
- CVE-2019-8761
- CVE-2019-8745
- CVE-2019-8831
- CVE-2019-8769
- CVE-2019-8768
- CVE-2019-8854
- CVE-2019-8711
- CVE-2019-8732
- CVE-2019-8760
- CVE-2019-8641
- CVE-2019-8718
- CVE-2019-8712
- CVE-2019-8704
- CVE-2019-8742
- CVE-2019-8731
- CVE-2019-8727
- CVE-2019-8771
- CVE-2019-8625
- CVE-2019-8719
- CVE-2019-8764
- CVE-2019-8707
- CVE-2019-8726
- CVE-2019-8728
- CVE-2019-8733
- CVE-2019-8734
- CVE-2019-8735
- CVE-2019-8674
Frequently Asked Questions
What is CVE-2019-8768?
CVE-2019-8768 is a vulnerability in WebKit where the 'Clear History and Website Data' feature does not clear the browsing history.
What is the severity of CVE-2019-8768?
The severity of CVE-2019-8768 is medium, with a CVSS score of 5.3.
How does CVE-2019-8768 affect macOS Catalina?
CVE-2019-8768 affects macOS Catalina 10.15, but it has been fixed with improved data deletion.
How can I fix CVE-2019-8768 on macOS Catalina?
To fix CVE-2019-8768 on macOS Catalina, update to the latest version of macOS Catalina (10.15) that includes the fix.
Is iOS affected by CVE-2019-8768?
Yes, CVE-2019-8768 also affects Apple iOS, specifically versions up to (but not including) iOS 13.