CVE-2019-8771

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2019
Source publication: Oct 27, 2020
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Safari

Vendor: Apple
Product: Safari
Platforms: Unknown
Default status: Unknown

Safari · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	13.0	Unavailable	None listed

iOS

Vendor: Apple
Product: iOS
Platforms: Unknown
Default status: Unknown

iOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	13	Unavailable	None listed