CVE-2019-8771: Medium severity Apple Safari vulnerability
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.
Other sources
WebKit. This issue was addressed with improved iframe sandbox enforcement.
WebKitGTK Security Advisory WSA-2019-0005 describes the following issue:
CVE-2019-8771
mpact: Maliciously crafted web content may violate iframe sandboxing policy. Description: This issue was addressed with improved iframe sandbox enforcement.
Versions affected: WebKitGTK before 2.26.0 and WPE WebKit before 2.26.0.
— Red Hat
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/webkitgtkto a version that resolves this vulnerability.Fixed in 2.26.0 - Upgrade
Upgrade
Safarito a version that resolves this vulnerability.Fixed in 13.0.1 - Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 13 - Upgrade
Upgrade
alpine/webkit2gtkto a version that resolves this vulnerability.Fixed in 2.26.0-r0 - Upgrade
Upgrade
WebKitGTKto a version that resolves this vulnerability.Fixed in 2.26.0 - Upgrade
Upgrade
WPE WebKitto a version that resolves this vulnerability.Fixed in 2.26.0 - Upgrade
Upgrade
iOSto a version that resolves this vulnerability.Fixed in 13
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-8654
- CVE-2019-8725
- CVE-2019-8771
- CVE-2019-8710
- CVE-2019-8743
- CVE-2019-8751
- CVE-2019-8752
- CVE-2019-8763
- CVE-2019-8765
- CVE-2019-8766
- CVE-2019-8773
- CVE-2019-8764
- CVE-2019-8762
- CVE-2020-9932
- CVE-2019-8711
- CVE-2019-8732
- CVE-2019-8753
- CVE-2019-8705
- CVE-2019-8592
- CVE-2019-8741
- CVE-2019-8825
- CVE-2019-8760
- CVE-2019-8641
- CVE-2019-8746
- CVE-2019-8718
- CVE-2019-8703
- CVE-2019-8809
- CVE-2019-8709
- CVE-2019-8712
- CVE-2019-8744
- CVE-2019-8717
- CVE-2019-8704
- CVE-2019-8749
- CVE-2019-8756
- CVE-2019-8742
- CVE-2019-8730
- CVE-2019-8708
- CVE-2019-8715
- CVE-2019-8731
- CVE-2019-8727
- CVE-2019-8745
- CVE-2019-8625
- CVE-2019-8719
- CVE-2019-8707
- CVE-2019-8726
- CVE-2019-8728
- CVE-2019-8733
- CVE-2019-8734
- CVE-2019-8735
- CVE-2019-8768
- CVE-2019-8674
- CVE-2019-8854
Frequently Asked Questions
What is the severity of CVE-2019-8771?
The severity of CVE-2019-8771 is medium with a CVSS score of 6.1.
Which products are affected by CVE-2019-8771?
The affected products include Apple Safari versions up to and excluding 13.0.1, Apple iOS versions up to and excluding 13, and Red Hat WebKitGTK version up to and excluding 2.26.0.
What is the CVE ID for this vulnerability?
The CVE ID for this vulnerability is CVE-2019-8771.
How can the vulnerability in CVE-2019-8771 be fixed?
To fix the vulnerability in CVE-2019-8771, update to Safari 13.0.1, iOS 13, or WebKitGTK 2.26.0.
Where can I find more information about CVE-2019-8771?
More information about CVE-2019-8771 can be found at the following references: [Apple Support](https://support.apple.com/en-us/HT210605), [Apple Support](https://support.apple.com/en-us/HT210606), [Red Hat Security](https://access.redhat.com/security/cve/CVE-2019-8771).