CVE-2020-9802 : A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, wa

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

Published 2020-06-09 17:15:12

Updated 2023-01-09 16:41:59

Source Apple Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-9802

Probability of exploitation activity in the next 30 days: 59.27%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2020-9802

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2020-9802

https://support.apple.com/HT211171

About the security content of tvOS 13.4.5 - Apple Support
Release Notes;Vendor Advisory

CVEs referencing this url
https://support.apple.com/HT211181

About the security content of iCloud for Windows 7.19 - Apple Support
Release Notes;Vendor Advisory

CVEs referencing this url
https://support.apple.com/HT211179

About the security content of iCloud for Windows 11.2 - Apple Support
Release Notes;Vendor Advisory

CVEs referencing this url
https://support.apple.com/HT211168

About the security content of iOS 13.5 and iPadOS 13.5 - Apple Support
Release Notes;Vendor Advisory

CVEs referencing this url
https://support.apple.com/HT211177

About the security content of Safari 13.1.1 - Apple Support
Broken Link;Release Notes;Vendor Advisory

CVEs referencing this url
https://support.apple.com/HT211178

About the security content of iTunes 12.10.7 for Windows - Apple Support
Release Notes;Vendor Advisory

CVEs referencing this url
https://support.apple.com/HT211175

About the security content of watchOS 6.2.5 - Apple Support
Release Notes;Vendor Advisory

CVEs referencing this url

Products affected by CVE-2020-9802

Apple » Safari
Versions before (<) 13.1.1
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Matching versions
Apple » Itunes » For Windows
Versions before (<) 12.10.7
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
Matching versions
Apple » Iphone Os
Versions before (<) 13.5
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Matching versions
Apple » Watchos
Versions before (<) 6.2.5
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Matching versions
Apple » Icloud » For Windows
Versions from including (>=) 11.0 and before (<) 11.2
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Matching versions
Apple » Icloud » For Windows
Versions before (<) 7.19
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Matching versions
Apple » Tvos
Versions before (<) 13.4.5
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Matching versions
Apple » Ipados
Versions before (<) 13.5
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2020-9802

Exploit prediction scoring system (EPSS) score for CVE-2020-9802

CVSS scores for CVE-2020-9802

References for CVE-2020-9802

Products affected by CVE-2020-9802