CVE-2019-8762: A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for W...

Summary

A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross site scripting.

What to do

Update apple itunes to version 12.10.1 or later.
Update apple safari to version 13.0.1 or later.
Update apple ipad_os to version 13.1 or later.
Update apple iphone_os to version 13.1 or later.
Update apple tvos to version 13 or later.

Affected software

Vendor	Product	Affected versions
apple	icloud	< 7.14 >= 10.0, < 10.7 `cpe:2.3:a:apple:icloud::::::windows::*`
apple	itunes	< 12.10.1 `cpe:2.3:a:apple:itunes::::::windows::*`
apple	safari	< 13.0.1 `cpe:2.3:a:apple:safari::::::::`
apple	ipad_os	< 13.1 `cpe:2.3:o:apple:ipad_os::::::::`
apple	iphone_os	< 13.1 `cpe:2.3:o:apple:iphone_os::::::::`
apple	tvos	< 13 `cpe:2.3:o:apple:tvos::::::::`

Original advisory text

A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for W...

A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross site scripting.

References

https://support.apple.com/en-us/HT210603 Vendor Advisory
https://support.apple.com/en-us/HT210604 Vendor Advisory
https://support.apple.com/en-us/HT210605 Vendor Advisory
https://support.apple.com/en-us/HT210635 Vendor Advisory
https://support.apple.com/en-us/HT210636 Vendor Advisory
https://support.apple.com/en-us/HT210637 Vendor Advisory