VULNERABILITY INTELLIGENCE

CVE-2019-6206

CVSS score9.8 CRITICAL

EPSS probability1.49%

CISA KEVNot currently listed

Published2019-03-04

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually cleared.

Weakness classification

nvd@nist.gov: CWE-200

Primary references

product-security@apple.com — Third Party Advisory, VDB Entry
product-security@apple.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory