CVE-2020-9952
- State
- Published
- Severity
- Not scored
- Published
- Oct 16, 2020
- Updated
- Aug 4, 2024
- Reserved
- Mar 2, 2020
Description
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
iOSApple |
|
tvOSApple |
|
watchOSApple |
|
SafariApple |
|
iCloud for WindowsApple |
|
iCloud for Windows (Legacy)Apple |
|
References
- https://support.apple.com/HT211850
- https://support.apple.com/HT211844
- https://support.apple.com/HT211845
- https://support.apple.com/HT211843
- https://support.apple.com/HT211846
- https://support.apple.com/HT211847
- 20201115 APPLE-SA-2020-11-13-5 Additional information for APPLE-SA-2020-09-16-3 Safari 14.0mailing-list
- 20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0mailing-list
- 20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0mailing-list
- 20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0mailing-list
- [oss-security] 20201123 WebKitGTK and WPE WebKit Security Advisory WSA-2020-0008mailing-list
- GLSA-202012-10vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.