A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
iOS
Vendor
Apple
Product
iOS
Platforms
Unknown
Default status
Unknown
iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
iOS 12.2
Unavailable
None listed
tvOS
Vendor
Apple
Product
tvOS
Platforms
Unknown
Default status
Unknown
tvOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
tvOS 12.2
Unavailable
None listed
Safari
Vendor
Apple
Product
Safari
Platforms
Unknown
Default status
Unknown
Safari · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Safari 12.1
Unavailable
None listed
iTunes for Windows
Vendor
Apple
Product
iTunes for Windows
Platforms
Unknown
Default status
Unknown
iTunes for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
iTunes 12.9.4 for Windows
Unavailable
None listed
iCloud for Windows
Vendor
Apple
Product
iCloud for Windows
Platforms
Unknown
Default status
Unknown
iCloud for Windows · Scoped product and version facts