Skip to content
Not rated

CVE-2019-8754 A cross-origin issue existed with "iframe" elements

Description

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A malicious HTML document may be able to render iframes with sensitive user information.

Affected products and versions

Product Affected versions Fixed in
macOS 10.15 earliest → < 10.15 10.15
The 3813 CVEs of macOS →
Track this CVE