CVEvulnerability
CVE-2020-9952
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-10-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-79
Description
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.
Affected configurations
• apple icloud (< 7.21)
• apple icloud (>= 11.0 < 11.4)
• apple safari (< 14.0)
• apple ipados (< 14.0)
• apple iphone os (< 14.0)
• apple tvos (< 14.0)
• apple watchos (< 7.0)
• webkit webkitgtk\+ (<= 2.30.3)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://seclists.org/fulldisclosure/2020/Nov/18 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Nov/19 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Nov/20 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Nov/22 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/11/23/3 Mailing List
- https://security.gentoo.org/glsa/202012-10 Third Party Advisory
- https://support.apple.com/HT211843 Release Notes, Vendor Advisory
- https://support.apple.com/HT211844 Release Notes, Vendor Advisory
- https://support.apple.com/HT211845 Release Notes, Vendor Advisory
- https://support.apple.com/HT211846 Release Notes, Vendor Advisory
- https://support.apple.com/HT211847 Release Notes, Vendor Advisory
- https://support.apple.com/HT211850 Vendor Advisory
- http://seclists.org/fulldisclosure/2020/Nov/18 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Nov/19 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Nov/20 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Nov/22 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/11/23/3 Mailing List
- https://security.gentoo.org/glsa/202012-10 Third Party Advisory
- https://support.apple.com/HT211843 Release Notes, Vendor Advisory
- https://support.apple.com/HT211844 Release Notes, Vendor Advisory
- https://support.apple.com/HT211845 Release Notes, Vendor Advisory
- https://support.apple.com/HT211846 Release Notes, Vendor Advisory
- https://support.apple.com/HT211847 Release Notes, Vendor Advisory
- https://support.apple.com/HT211850 Vendor Advisory