High severity8.8NVD Advisory· Published Jun 9, 2020· Updated Jun 17, 2026

CVE-2020-9802

Description

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

106

Apple Inc./tvOSv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: =13.4.5
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <13.4.5
Apple Inc./watchOSv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: =6.2.5
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <6.2.5
Apple Inc./Safariv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: =13.1.1
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <13.1.1
osv-coords85 versions
pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.3 pkg:rpm/almalinux/LibRaw-devel pkg:rpm/almalinux/PackageKit pkg:rpm/almalinux/PackageKit-command-not-found pkg:rpm/almalinux/PackageKit-cron pkg:rpm/almalinux/PackageKit-glib pkg:rpm/almalinux/PackageKit-glib-devel pkg:rpm/almalinux/PackageKit-gstreamer-plugin pkg:rpm/almalinux/PackageKit-gtk3-module pkg:rpm/almalinux/dleyna-renderer pkg:rpm/almalinux/frei0r-devel pkg:rpm/almalinux/frei0r-plugins pkg:rpm/almalinux/frei0r-plugins-opencv pkg:rpm/almalinux/gnome-remote-desktop pkg:rpm/almalinux/gtk-doc pkg:rpm/almalinux/gvfs pkg:rpm/almalinux/libsoup pkg:rpm/almalinux/libsoup-devel pkg:rpm/almalinux/mutter-devel pkg:rpm/almalinux/pipewire pkg:rpm/almalinux/pipewire-utils pkg:rpm/almalinux/pipewire0.2-libs pkg:rpm/almalinux/potrace pkg:rpm/almalinux/python3-gobject pkg:rpm/almalinux/tracker pkg:rpm/almalinux/webrtc-audio-processing pkg:rpm/almalinux/xdg-desktop-portal-gtk pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%205 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/opensuse/gtk3&distro=openSUSE%20Tumbleweed pkg:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/almalinux/nautilus pkg:rpm/almalinux/nautilus-devel pkg:rpm/almalinux/pipewire-devel pkg:rpm/almalinux/pipewire-doc pkg:rpm/almalinux/pipewire-libs pkg:rpm/almalinux/pipewire0.2-devel pkg:rpm/almalinux/pygobject3-devel pkg:rpm/almalinux/python3-gobject-base pkg:rpm/almalinux/tracker-devel pkg:rpm/almalinux/vte-profile pkg:rpm/almalinux/vte291 pkg:rpm/almalinux/vte291-devel pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208
< 2.28.3-lp151.2.21.1+ 84 more
- (no CPE)range: < 2.28.3-lp151.2.21.1
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 0.19.5-2.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 0.6.0-3.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 0.1.8-3.el8
- (no CPE)range: < 1.28-2.el8
- (no CPE)range: < 1.36.2-10.el8
- (no CPE)range: < 2.62.3-2.el8
- (no CPE)range: < 2.62.3-2.el8
- (no CPE)range: < 3.32.2-48.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.2.7-6.el8
- (no CPE)range: < 1.15-3.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 2.1.5-2.el8
- (no CPE)range: < 0.3-9.el8
- (no CPE)range: < 1.6.0-1.el8
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.28.3-3.3.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.3.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.32.4-1.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 3.28.1-14.el8
- (no CPE)range: < 3.28.1-14.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.2.7-6.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 2.1.5-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.28.3-2.56.1
Apple Inc./iOSllm-fuzzy2 versions
=13.5+ 1 more
- (no CPE)range: =13.5
- (no CPE)range: unspecified
Apple Inc./Ipadosllm-fuzzy2 versions
=13.5+ 1 more
- (no CPE)range: =13.5
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <13.5
Apple Inc./iTunesllm-fuzzy2 versions
=12.10.7+ 1 more
- (no CPE)range: =12.10.7
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*range: <12.10.7
Apple Inc./iCloud for Windowsllm-fuzzy3 versions
=11.2+ 2 more
- (no CPE)range: =11.2
- (no CPE)range: unspecified
- (no CPE)range: unspecified
Apple Inc./iCloud
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Range: <7.19
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <13.5
Apple Inc./iTunes for Windowscpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/HT211168nvdRelease NotesVendor Advisory
support.apple.com/HT211171nvdRelease NotesVendor Advisory
support.apple.com/HT211175nvdRelease NotesVendor Advisory
support.apple.com/HT211177nvdBroken LinkRelease NotesVendor Advisory
support.apple.com/HT211178nvdRelease NotesVendor Advisory
support.apple.com/HT211179nvdRelease NotesVendor Advisory
support.apple.com/HT211181nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000