CVE-2019-8790: Apple Swift

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.

Affected products

• Apple Swift: before 5.1.1 (fixed in 5.1.1)

Published 2020-10-27. Last modified 2026-06-17.