QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-9952

Back to search

CVE-2020-9952

Published: Oct 16, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.

VendorProductVersions

Apple

iOS

affected
unspecified - < iOS 14.0 and iPadOS 14.0

Apple

tvOS

affected
unspecified - < tvOS 14.0

Apple

watchOS

affected
unspecified - < watchOS 7.0

Apple

Safari

affected
unspecified - < Safari 14.0

Apple

iCloud for Windows

affected
unspecified - < iCloud for Windows 11.4

Apple

iCloud for Windows (Legacy)

affected
unspecified - < iCloud for Windows 7.21

References

GLSA-202012-10
vendor-advisory
x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now