CVE-2020-9993

published 2020-12-08

CVE-2020-9993: The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may…

Priority P4 18 medium 4.3 CVSS 3.1

AV N AC L PR N UI R S U C N I L A N

The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
apple	ios_and_ipados	>= unspecified < 14.0	14.0
apple	ipados	< 14.0	14.0
apple	iphone_os	< 14.0	14.0
apple	safari	—	—
apple	safari	>= unspecified < 14.0	14.0
apple	watchos	< 7.0	7.0
apple	watchos	—	—
apple	watchos	>= unspecified < 7.0	7.0

CVSS provenance

nvd v3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-1021