An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site.
https://support.apple.com/kb/HT210724
https://support.apple.com/kb/HT210722
https://support.apple.com/kb/HT210721
https://support.apple.com/HT208334
http://seclists.org/fulldisclosure/2019/Oct/56