Description Preview
This vulnerability is a logic issue that was addressed with improved state management. The affected versions are those less than 12.1 for iOS and tvOS, less than 12.0 for Safari, and less than 12.9 for iTunes for Windows. The issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. If exploited, the vulnerability could allow an attacker to disclose sensitive user information by processing maliciously crafted web content.
Overview
The vulnerability is a logic issue that was addressed with improved state management. The affected Apple products are iOS, tvOS, Safari, and iTunes for Windows. The versions affected are those less than 12.1 for iOS and tvOS, less than 12.0 for Safari, and less than 12.9 for iTunes for Windows. The vulnerability could potentially disclose sensitive user information when processing maliciously crafted web content.
Remediation
The issue has been fixed in the following versions of the respective software: Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Users are advised to update their software to the latest version to avoid potential exploitation of this vulnerability.
References
- https://support.apple.com/en-us/HT209340
- https://support.apple.com/en-us/HT209342
- https://support.apple.com/en-us/HT209344
- https://support.apple.com/en-us/HT209345
Industry ExposureMost to leastThis section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
- Health Care & Social AssistanceHealth Care & Social Assistance
- ManufacturingManufacturing
- Public AdministrationPublic Administration
- Educational ServicesEducational Services
- Transportation & WarehousingTransportation & Warehousing
- Retail TradeRetail Trade
- Finance and InsuranceFinance and Insurance
- UtilitiesUtilities
- Other Services (except Public Administration)Other Services (except Public Administration)
- Professional, Scientific, & Technical ServicesProfessional, Scientific, & Technical Services
- Arts, Entertainment & RecreationArts, Entertainment & Recreation
- InformationInformation
- Management of Companies & EnterprisesManagement of Companies & Enterprises
- Agriculture, Forestry Fishing & HuntingAgriculture, Forestry Fishing & Hunting
- ConstructionConstruction
- MiningMining
- Real Estate Rental & LeasingReal Estate Rental & Leasing
- Accommodation & Food ServicesAccommodation & Food Services
- Administrative, Support, Waste Management & Remediation ServicesAdministrative, Support, Waste Management & Remediation Services
- Wholesale TradeWholesale Trade
