CVE-2019-8503
Fixed in a distro release EPSS 2%
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website.
Products: Apple iOS, Apple tvOS, apple safari, Apple iTunes for Windows, Apple iCloud for Windows
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | webkit2gtk | 2.24.1-1 |
| Debian 13 | webkit2gtk | 2.24.1-1 |
| Debian 14 | webkit2gtk | 2.24.1-1 |
| Red Hat Enterprise Linux 7 | webkitgtk4 | 0:2.22.7-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-debuginfo | 0:2.22.7-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-devel | 0:2.22.7-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-doc | 0:2.22.7-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-jsc | 0:2.22.7-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-jsc-devel | 0:2.22.7-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-plugin-process-gtk2 | 0:2.22.7-2.el7 |
| SUSE Enterprise Storage 4 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Desktop 12 SP3 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Desktop 12 SP4 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Module for Basesystem 15 | webkit2gtk3 | 2.24.1-3.24.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | webkit2gtk3 | 2.24.1-3.24.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Server 12 SP3 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Server 12 SP4 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | webkit2gtk3 | 2.24.1-2.41.5 |
| SUSE OpenStack Cloud 7 | webkit2gtk3 | 2.24.1-2.41.5 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| Ubuntu 18.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 18.04 LTS | qtwebkit-source | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | 2.22.6-0ubuntu0.18.04.1 |
| Ubuntu 18.04 LTS | webkitgtk | no fix |
| Ubuntu 20.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 22.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 24.04 LTS | qtwebkit-opensource-src | no fix |
| openSUSE Leap 15.0 | webkit2gtk3 | 2.24.1-lp150.2.19.1 |