CVE-2020-9911 - A logic issue was addressed with improved restrictions

Back Back to CVE browser

HIGH

A logic issue was addressed with improved restrictions

Published Oct 16, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.46%

Description

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. An issue in Safari Reader mode may allow a remote attacker to bypass the Same Origin Policy.

Affected products

Vendor Apple Product Safari Default
unknown
Affected
- ≥ unspecified, < Safari 13.1.2
Vendor Apple Product iOS Default
unknown
Affected
- ≥ unspecified, < iOS 13.6 and iPadOS 13.6

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Apple	Safari	unknown	Affected ≥ unspecified, < Safari 13.1.2
Apple	iOS	unknown	Affected ≥ unspecified, < iOS 13.6 and iPadOS 13.6

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30690
Advisory
https://support.apple.com/HT211288
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211292
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30690		Advisory
https://support.apple.com/HT211288		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211292		x_refsource_MISCRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Oct 16, 2020

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9911

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9911

Red Hat

No data

ENISA EUVD

Assigner apple

Published Oct 16, 2020

Updated Aug 4, 2024

Link EUVD-2020-30690

GitHub

No data