description: A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website.
problem types: A malicious website may be able to execute scripts in the context of another website
affected:
{
product: iOS
vendor: Apple
versions:
lessThan: iOS 12.2, status: affected, version: unspecified, versionType: custom
}
{
product: tvOS
vendor: Apple
versions:
lessThan: tvOS 12.2, status: affected, version: unspecified, versionType: custom
}
{
product: Safari
vendor: Apple
versions:
lessThan: Safari 12.1, status: affected, version: unspecified, versionType: custom
}
{
product: iTunes for Windows
vendor: Apple
versions:
lessThan: iTunes 12.9.4 for Windows, status: affected, version: unspecified, versionType: custom
}
{
product: iCloud for Windows
vendor: Apple
versions:
lessThan: iCloud for Windows 7.11, status: affected, version: unspecified, versionType: custom
}
