Skip to content
OpenAdvisories
Unscored CVE-2019-8762 EUVD-2019-18152GHSA-3fh9-4r73-52mw

A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10…

Published Oct 27, 2020 · Updated Aug 4, 2024 · Assigned by apple

Description

A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross site scripting.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS unspecified – < 13.1 13.1
Apple tvOS unspecified – < 13 13
Apple Safari unspecified – < 13.0 13.0
Apple iTunes for Windows unspecified – < 12.10 12.10
Apple iCloud for Windows unspecified – < 10.7, unspecified – < 7.14 10.7

References