Description
Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| iOS | Apple / iOS | >= unspecified, < 12.5 | affected |
| iOS and iPadOS | Apple / iOS and iPadOS | >= unspecified, < 14.4 | affected |
| watchOS | Apple / watchOS | >= unspecified, < 7.3 | affected |