The HTTP referrer header may be used to leak browsing history. The issue was resolved by downgrading all third party referrers to their origin. This issue is fixed in Safari 13.0.3, iTunes 12.10.2 for Windows, iCloud for Windows 10.9.2, tvOS 13.2, iOS 13.2 and iPadOS 13.2, iCloud for Windows 7.15. Visiting a maliciously crafted website may reveal the sites a user has visited.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
iOS and iPadOS
Vendor
Apple
Product
iOS and iPadOS
Platforms
Unknown
Default status
Unknown
iOS and iPadOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
13.2
Unavailable
None listed
tvOS
Vendor
Apple
Product
tvOS
Platforms
Unknown
Default status
Unknown
tvOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
13.2
Unavailable
None listed
Safari
Vendor
Apple
Product
Safari
Platforms
Unknown
Default status
Unknown
Safari · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
13.0
Unavailable
None listed
iTunes for Windows
Vendor
Apple
Product
iTunes for Windows
Platforms
Unknown
Default status
Unknown
iTunes for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
12.10
Unavailable
None listed
iCloud for Windows
Vendor
Apple
Product
iCloud for Windows
Platforms
Unknown
Default status
Unknown
iCloud for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
7.15
Unavailable
None listed
iCloud for Windows
Vendor
Apple
Product
iCloud for Windows
Platforms
Unknown
Default status
Unknown
iCloud for Windows · Scoped product and version facts