webkitgtk: Logic issue may lead to arbitrary code execution
Published Jun 9, 2020
9.8
CRITICALCVSS 3.1
EPSS 77.40%
Description
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code execution.
Affected products
-
Affected
- ≥ unspecified, < Safari 13.1.1
-
Affected
- ≥ unspecified, < iCloud for Windows 11.2
-
Affected
- ≥ unspecified, < iCloud for Windows 7.19
-
Affected
- ≥ unspecified, < iOS 13.5 and iPadOS 13.5
-
Affected
- ≥ unspecified, < iTunes 12.10.7 for Windows
-
Affected
- ≥ unspecified, < tvOS 13.4.5
-
Affected
- ≥ unspecified, < watchOS 6.2.5
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Apple | Safari | unknown | Affected
|
| Apple | iCloud for Windows | unknown | Affected
|
| Apple | iCloud for Windows (Legacy) | unknown | Affected
|
| Apple | iOS | unknown | Affected
|
| Apple | iTunes for Windows | unknown | Affected
|
| Apple | tvOS | unknown | Affected
|
| Apple | watchOS | unknown | Affected
|
No data.
Red Hat Enterprise Linux 7 Extended Lifecycle Support
webkitgtk4-0:2.48.3-2.el7_9
Fixed · RHSA-2025:10364
Red Hat Enterprise Linux 8
webkit2gtk3-0:2.28.4-1.el8
Fixed · RHSA-2020:4451
Red Hat Enterprise Linux 6
webkitgtk
Out of support scope
Red Hat Enterprise Linux 7
webkitgtk3
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | webkitgtk4-0:2.48.3-2.el7_9 | Fixed | RHSA-2025:10364 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-0:2.28.4-1.el8 | Fixed | RHSA-2020:4451 |
| Red Hat Enterprise Linux 6 | webkitgtk | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | webkitgtk3 | Will not fix | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This flaw is being rated as 'Moderate' as WebKitGTK package is shipped as a dependency for Gnome package, additionally Red Hat Enterprise Linux doesn't shipped any WebKitGTK based web browser where this flaw would present a higher severity major threat.
References (13)
- https://access.redhat.com/security/cve/CVE-2020-9850 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1879568 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30629 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-9850
- https://support.apple.com/HT211168 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT211171 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT211175 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT211177 x_refsource_MISCBroken LinkVendor Advisory
- https://support.apple.com/HT211178 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT211179 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT211181 x_refsource_MISCVendor Advisory
- https://webkitgtk.org/security/WSA-2020-0006.html
- https://www.cve.org/CVERecord?id=CVE-2020-9850
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2020-9850 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1879568 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30629 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2020-9850 | ||
| https://support.apple.com/HT211168 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT211171 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT211175 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT211177 | x_refsource_MISCBroken LinkVendor Advisory | |
| https://support.apple.com/HT211178 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT211179 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT211181 | x_refsource_MISCVendor Advisory | |
| https://webkitgtk.org/security/WSA-2020-0006.html | ||
| https://www.cve.org/CVERecord?id=CVE-2020-9850 |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data