7 matches found
CVE-2020-9857
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra. A malicious website may be able to exfiltrate autofilled data in Safari...
CVE-2020-9857
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra. A malicious website may be able to exfiltrate autofilled data in Safari...
CVE-2020-9857
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra. A malicious website may be able to exfiltrate autofilled data in Safari...
PT-2020-20810
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.5 Security Update versions prior to 2020-003 Mojave Security Update versions prior to 2020-003 High Sierra Description The issue existed in the parsing of URLs, which could allow a malicious website to exfiltrate...
CVE-2018-4137
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows remote attackers to read autofilled data by leveraging lack of a user-confirmation requirement...
CVE-2018-4137
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows remote attackers to read autofilled data by leveraging lack of a user-confirmation requirement...
CVE-2018-4137
The CVE-2018-4137 issue affects Apple Safari and iOS: Safari before 11.1 and iOS before 11.3 allow a remote attacker to read autofilled data via the Safari Login AutoFill component without requiring user confirmation. This appears as a cross-product autofill disclosure risk in the Safari/Login Au...