CVE-2019-8725: Apple Safari

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

The issue was addressed with improved handling of service worker lifetime. This issue is fixed in Safari 13.0.1. Service workers may leak private browsing history.

Affected products

• Apple Safari: before 13.0.1 (fixed in 13.0.1)

Published 2019-12-18. Last modified 2026-06-17.