A cross-origin issue existed with “iframe” elements. This was addressed with improved tracking of security origins. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A malicious HTML document may be able to render iframes with sensitive user information.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8754
Reference (s):
- https://support.apple.com/en-us/HT210722
- URL: https://support.apple.com/en-us/HT210722

