CVE-2019-1218

CVE-2019-1218 is a spoofing vulnerability in Microsoft Outlook for iOS that allows cross-site scripting (XSS) attacks through specially crafted email messages. An authenticated attacker could exploit this by sending a malicious email, enabling them to run scripts in the context of the current user. The vulnerability has a CVSS score of 5.4 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and resulting in low confidentiality and integrity impacts. Its EPSS score is low, suggesting a low probability of exploitation. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, with only one article mentioning it as part of a larger patch Tuesday update.