A cross-origin issue existed with iframe elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
The product does not properly verify that the source of data or communication is valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Icloud | Apple | * | 7.7 (excluding) |
| Itunes | Apple | * | 12.9 (excluding) |
| Safari | Apple | * | 12 (excluding) |
| Iphone_os | Apple | * | 12.0 (excluding) |
| Qtwebkit | Ubuntu | eoan | * |
| Qtwebkit-opensource-src | Ubuntu | bionic | * |
| Qtwebkit-opensource-src | Ubuntu | cosmic | * |
| Qtwebkit-opensource-src | Ubuntu | devel | * |
| Qtwebkit-opensource-src | Ubuntu | disco | * |
| Qtwebkit-opensource-src | Ubuntu | eoan | * |
| Qtwebkit-opensource-src | Ubuntu | esm-apps/bionic | * |
| Qtwebkit-opensource-src | Ubuntu | esm-apps/focal | * |
| Qtwebkit-opensource-src | Ubuntu | esm-apps/jammy | * |
| Qtwebkit-opensource-src | Ubuntu | esm-apps/noble | * |
| Qtwebkit-opensource-src | Ubuntu | esm-infra/xenial | * |
| Qtwebkit-opensource-src | Ubuntu | focal | * |
| Qtwebkit-opensource-src | Ubuntu | groovy | * |
| Qtwebkit-opensource-src | Ubuntu | hirsute | * |
| Qtwebkit-opensource-src | Ubuntu | impish | * |
| Qtwebkit-opensource-src | Ubuntu | jammy | * |
| Qtwebkit-opensource-src | Ubuntu | kinetic | * |
| Qtwebkit-opensource-src | Ubuntu | lunar | * |
| Qtwebkit-opensource-src | Ubuntu | mantic | * |
| Qtwebkit-opensource-src | Ubuntu | noble | * |
| Qtwebkit-opensource-src | Ubuntu | trusty | * |
| Qtwebkit-opensource-src | Ubuntu | upstream | * |
| Qtwebkit-opensource-src | Ubuntu | xenial | * |
| Qtwebkit-source | Ubuntu | bionic | * |
| Qtwebkit-source | Ubuntu | cosmic | * |
| Qtwebkit-source | Ubuntu | disco | * |
| Qtwebkit-source | Ubuntu | esm-apps/bionic | * |
| Qtwebkit-source | Ubuntu | esm-apps/xenial | * |
| Qtwebkit-source | Ubuntu | trusty | * |
| Qtwebkit-source | Ubuntu | xenial | * |
| Webkit2gtk | Ubuntu | bionic | * |
| Webkit2gtk | Ubuntu | cosmic | * |
| Webkit2gtk | Ubuntu | devel | * |
| Webkit2gtk | Ubuntu | disco | * |
| Webkit2gtk | Ubuntu | eoan | * |
| Webkit2gtk | Ubuntu | esm-infra/xenial | * |
| Webkit2gtk | Ubuntu | focal | * |
| Webkit2gtk | Ubuntu | groovy | * |
| Webkit2gtk | Ubuntu | hirsute | * |
| Webkit2gtk | Ubuntu | impish | * |
| Webkit2gtk | Ubuntu | jammy | * |
| Webkit2gtk | Ubuntu | kinetic | * |
| Webkit2gtk | Ubuntu | lunar | * |
| Webkit2gtk | Ubuntu | mantic | * |
| Webkit2gtk | Ubuntu | noble | * |
| Webkit2gtk | Ubuntu | upstream | * |
| Webkit2gtk | Ubuntu | xenial | * |
| Webkitgtk | Ubuntu | bionic | * |
| Webkitgtk | Ubuntu | cosmic | * |
| Webkitgtk | Ubuntu | esm-apps/bionic | * |
| Webkitgtk | Ubuntu | esm-apps/xenial | * |
| Webkitgtk | Ubuntu | trusty | * |
| Webkitgtk | Ubuntu | xenial | * |