A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
iOS
Vendor
Apple
Product
iOS
Platforms
Unknown
Default status
Unknown
iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
iOS 12.2
Unavailable
None listed
tvOS
Vendor
Apple
Product
tvOS
Platforms
Unknown
Default status
Unknown
tvOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
tvOS 12.2
Unavailable
None listed
Safari
Vendor
Apple
Product
Safari
Platforms
Unknown
Default status
Unknown
Safari · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Safari 12.1
Unavailable
None listed
iTunes for Windows
Vendor
Apple
Product
iTunes for Windows
Platforms
Unknown
Default status
Unknown
iTunes for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
iTunes 12.9.4 for Windows
Unavailable
None listed
iCloud for Windows
Vendor
Apple
Product
iCloud for Windows
Platforms
Unknown
Default status
Unknown
iCloud for Windows · Scoped product and version facts