Description
A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
References (5)
Core 5
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209192
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209195
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209197
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209198
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209196
Scores
CVSS v3
6.1
EPSS
0.0225
EPSS Percentile
81.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (5)
apple/icloud
< 7.8
apple/iphone_os
< 12.1
apple/itunes
< 12.9.1
apple/safari
< 12.0.1
apple/watchos
< 5.1
Published
Apr 03, 2019
Tracked Since
Feb 18, 2026