4.3

CVE-2019-8898

An information disclosure issue existed in the handling of the Storage Access API. This issue was addressed with improved logic. This issue is fixed in iOS 13.3 and iPadOS 13.3, tvOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows. Visiting a maliciously crafted website may reveal sites a user has visited.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ iTunes SwPlatformwindows Version < 12.10.3
Apple ≫ Safari Version < 13.0.4
Apple ≫ iPadOS Version < 13.3
Apple ≫ iPhone OS Version < 13.3
Apple ≫ tvOS Version < 13.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.46% 0.61
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
https://support.apple.com/en-us/HT210785
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT210790
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT210793
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT210792
Vendor Advisory
Release Notes