Description (CNA)
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / iOS | affected unspecified before iOS 12.2 |
| Apple / tvOS | affected unspecified before tvOS 12.2 |
| Apple / Safari | affected unspecified before Safari 12.1 |
| Apple / iTunes for Windows | affected unspecified before iTunes 12.9.4 for Windows |
| Apple / iCloud for Windows | affected unspecified before iCloud for Windows 7.11 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/HT209599
- https://support.apple.com/HT209601
- https://support.apple.com/HT209603
- https://support.apple.com/HT209604
- https://support.apple.com/HT209605
ADP enrichment
No English description supplied.