CVE-2019-8827 | Vulnetix

CVE-2019-8827 PUBLISHED CVSS 4.300000190734863 MEDIUM

The HTTP referrer header may be used to leak browsing history. The issue was resolved by downgrading all third party referrers to their origin. This issue is fixed in Safari 13.0.3, iTunes 12.10.2 for Windows, iCloud for Windows 10.9.2, tvOS 13.2, iOS 13.2 and iPadOS 13.2, iCloud for Windows 7.15. Visiting a maliciously crafted website may reveal the sites a user has visited.

EPSS 1.05% · 61.1th percentile

Risk Scores

CVSS 3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS Score

1.05%

61.1th percentile

Affected Products

Vendor	Product	Versions
apple	tvos	0
Apple	iCloud for Windows	unspecified, unspecified
apple	safari	0
Apple	Safari	unspecified
apple	ipados	0
apple	iphone_os	0
apple	icloud	10.0, 0
Apple	tvOS	*
Apple	iTunes for Windows	unspecified
apple	itunes	0
Apple	iOS and iPadOS	unspecified

Timeline

Oct 27, 2020 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 28, 2022 EPSS Score
May 2, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Nov 6, 2022 EPSS Score
Jan 8, 2023 EPSS Score

References

Open in Interactive Console →