CVE-2019-8769: Medium severity Apple macOS Catalina vulnerability
An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history.
Other sources
WebKit. An issue existed in the drawing of web page elements. The issue was addressed with improved logic.
WebKitGTK Security Advisory WSA-2019-0005 describes the following issue:
CVE-2019-8769
Impact: Visiting a maliciously crafted website may reveal browsing history. Description: An issue existed in the drawing of web page elements. The issue was addressed with improved logic.
Versions affected: WebKitGTK before 2.26.0 and WPE WebKit before 2.26.0.
— Red Hat
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/webkitgtkto a version that resolves this vulnerability.Fixed in 2.26.0 - Upgrade
Upgrade
macOS Catalinato a version that resolves this vulnerability.Fixed in 10.15 - Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 13.1 - Upgrade
Upgrade
Apple iOS, iPadOS, and macOSto a version that resolves this vulnerability.Fixed in 13.1 - Upgrade
Upgrade
alpine/webkit2gtkto a version that resolves this vulnerability.Fixed in 2.26.0-r0 - Upgrade
Upgrade
WebKitGTKto a version that resolves this vulnerability.Fixed in 2.26.0 - Upgrade
Upgrade
WPE WebKitto a version that resolves this vulnerability.Fixed in 2.26.0 - Upgrade
Upgrade
iOSto a version that resolves this vulnerability.Fixed in 13.1 - Upgrade
Upgrade
iPadOSto a version that resolves this vulnerability.Fixed in 13.1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-8748
- CVE-2019-11041
- CVE-2019-11042
- CVE-2019-8706
- CVE-2019-8850
- CVE-2019-8774
- CVE-2019-8753
- CVE-2019-8705
- CVE-2019-8592
- CVE-2019-8741
- CVE-2019-8825
- CVE-2019-8757
- CVE-2019-8736
- CVE-2019-8767
- CVE-2019-8737
- CVE-2019-8776
- CVE-2019-8509
- CVE-2019-8746
- CVE-2018-12152
- CVE-2018-12153
- CVE-2018-12154
- CVE-2019-8759
- CVE-2019-8758
- CVE-2019-8755
- CVE-2019-8703
- CVE-2019-8809
- CVE-2019-8744
- CVE-2019-8717
- CVE-2019-8709
- CVE-2019-8781
- CVE-2019-8749
- CVE-2019-8756
- CVE-2019-8750
- CVE-2019-8799
- CVE-2019-8826
- CVE-2019-8730
- CVE-2019-8772
- CVE-2019-8708
- CVE-2019-8715
- CVE-2019-8855
- CVE-2019-8770
- CVE-2019-8701
- CVE-2019-8761
- CVE-2019-8745
- CVE-2019-8831
- CVE-2019-8769
- CVE-2019-8768
- CVE-2019-8854
- CVE-2019-8747
- CVE-2019-8740
- CVE-2019-8780
- CVE-2019-8901
- CVE-2019-8775
- CVE-2019-8710
- CVE-2019-8743
- CVE-2019-8751
- CVE-2019-8752
- CVE-2019-8763
- CVE-2019-8765
- CVE-2019-8766
- CVE-2019-8773
- CVE-2019-8762
- CVE-2020-9932
Frequently Asked Questions
What is CVE-2019-8769?
CVE-2019-8769 is a vulnerability that existed in the drawing of web page elements in WebKit.
What is the severity of CVE-2019-8769?
The severity of CVE-2019-8769 is medium (4.3).
Which software versions are affected by CVE-2019-8769?
The affected software versions are iOS 13.1 and iPadOS 13.1, and macOS Catalina 10.15.
How can I fix CVE-2019-8769?
To fix CVE-2019-8769, update your software to iOS 13.1 or iPadOS 13.1, or macOS Catalina 10.15.
Where can I find more information about CVE-2019-8769?
You can find more information about CVE-2019-8769 at the following references: [Apple Support](https://support.apple.com/en-us/HT210634), [Apple Support](https://support.apple.com/en-us/HT210603), and [Red Hat Security Advisory](https://access.redhat.com/security/cve/CVE-2019-8769).