High severity8.8NVD Advisory· Published Jun 9, 2020· Updated Jun 17, 2026

CVE-2020-9806

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./tvOSv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <=13.4.5
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <13.4.5
Apple Inc./watchOSv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <=6.2.5
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <6.2.5
Apple Inc./Safariv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <=13.1.1
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <13.1.1
osv-coords66 versions
pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/opensuse/gtk3&distro=openSUSE%20Tumbleweed pkg:rpm/almalinux/LibRaw-devel pkg:rpm/almalinux/PackageKit pkg:rpm/almalinux/PackageKit-command-not-found pkg:rpm/almalinux/PackageKit-cron pkg:rpm/almalinux/PackageKit-glib pkg:rpm/almalinux/PackageKit-glib-devel pkg:rpm/almalinux/PackageKit-gstreamer-plugin pkg:rpm/almalinux/frei0r-plugins pkg:rpm/almalinux/frei0r-plugins-opencv pkg:rpm/almalinux/gnome-remote-desktop pkg:rpm/almalinux/gtk-doc pkg:rpm/almalinux/gvfs pkg:rpm/almalinux/libsoup pkg:rpm/almalinux/libsoup-devel pkg:rpm/almalinux/mutter-devel pkg:rpm/almalinux/nautilus pkg:rpm/almalinux/nautilus-devel pkg:rpm/almalinux/pipewire pkg:rpm/almalinux/pipewire-devel pkg:rpm/almalinux/pipewire-doc pkg:rpm/almalinux/pipewire-libs pkg:rpm/almalinux/pipewire-utils pkg:rpm/almalinux/pipewire0.2-devel pkg:rpm/almalinux/pipewire0.2-libs pkg:rpm/almalinux/potrace pkg:rpm/almalinux/pygobject3-devel pkg:rpm/almalinux/python3-gobject pkg:rpm/almalinux/python3-gobject-base pkg:rpm/almalinux/tracker pkg:rpm/almalinux/tracker-devel pkg:rpm/almalinux/vte-profile pkg:rpm/almalinux/vte291 pkg:rpm/almalinux/vte291-devel pkg:rpm/almalinux/webrtc-audio-processing pkg:rpm/almalinux/xdg-desktop-portal-gtk pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%205 pkg:rpm/almalinux/PackageKit-gtk3-module pkg:rpm/almalinux/dleyna-renderer pkg:rpm/almalinux/frei0r-devel
< 2.28.3-lp151.2.21.1+ 65 more
- (no CPE)range: < 2.28.3-lp151.2.21.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.32.4-1.1
- (no CPE)range: < 0.19.5-2.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 0.1.8-3.el8
- (no CPE)range: < 1.28-2.el8
- (no CPE)range: < 1.36.2-10.el8
- (no CPE)range: < 2.62.3-2.el8
- (no CPE)range: < 2.62.3-2.el8
- (no CPE)range: < 3.32.2-48.el8
- (no CPE)range: < 3.28.1-14.el8
- (no CPE)range: < 3.28.1-14.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.2.7-6.el8
- (no CPE)range: < 0.2.7-6.el8
- (no CPE)range: < 1.15-3.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 2.1.5-2.el8
- (no CPE)range: < 2.1.5-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.3-9.el8
- (no CPE)range: < 1.6.0-1.el8
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.3.1
- (no CPE)range: < 2.28.3-3.3.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 0.6.0-3.el8
- (no CPE)range: < 1.6.1-7.el8
Apple Inc./Ipadosllm-fuzzy2 versions
<=13.5+ 1 more
- (no CPE)range: <=13.5
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <13.5
Apple Inc./iTunesllm-fuzzy2 versions
<=12.10.7+ 1 more
- (no CPE)range: <=12.10.7
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*range: <12.10.7
Apple Inc./iOSllm-fuzzy2 versions
<=13.5+ 1 more
- (no CPE)range: <=13.5
- (no CPE)range: unspecified
Apple Inc./iCloud for Windowsllm-fuzzy3 versions
<=11.2, <=7.19+ 2 more
- (no CPE)range: <=11.2, <=7.19
- (no CPE)range: unspecified
- (no CPE)range: unspecified
Apple Inc./iTunes for Windowscpe-rescue
Range: unspecified
Apple Inc./iCloud
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Range: <7.19
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <13.5

Patches

Vulnerability mechanics

References

support.apple.com/HT211168nvdRelease NotesVendor Advisory
support.apple.com/HT211171nvdRelease NotesVendor Advisory
support.apple.com/HT211175nvdRelease NotesVendor Advisory
support.apple.com/HT211177nvdRelease NotesVendor Advisory
support.apple.com/HT211178nvdRelease NotesVendor Advisory
support.apple.com/HT211179nvdRelease NotesVendor Advisory
support.apple.com/HT211181nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000