High severity7.1NVD Advisory· Published Jun 9, 2020· Updated Jun 17, 2026

CVE-2020-9843

Description

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to a cross site scripting attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./tvOSv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: =13.4.5
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <13.4.5
Apple Inc./watchOSv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: =6.2.5
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <6.2.5
Apple Inc./Safariv53 versions
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: =13.1.1
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <13.1.1
Apple Inc./iOSllm-fuzzy2 versions
=13.5+ 1 more
- (no CPE)range: =13.5
- (no CPE)range: unspecified
Apple Inc./Ipadosllm-fuzzy2 versions
=13.5+ 1 more
- (no CPE)range: =13.5
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <13.5
Apple Inc./iTunesllm-fuzzy2 versions
=12.10.7+ 1 more
- (no CPE)range: =12.10.7
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*range: <12.10.7
Apple Inc./iCloud for Windowsllm-fuzzy3 versions
=11.2+ 2 more
- (no CPE)range: =11.2
- (no CPE)range: unspecified
- (no CPE)range: unspecified
Apple Inc./iCloud
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Range: <7.19
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <13.5
osv-coords65 versions
pkg:rpm/almalinux/LibRaw-devel pkg:rpm/almalinux/PackageKit pkg:rpm/almalinux/PackageKit-gstreamer-plugin pkg:rpm/almalinux/PackageKit-gtk3-module pkg:rpm/almalinux/dleyna-renderer pkg:rpm/almalinux/frei0r-devel pkg:rpm/almalinux/frei0r-plugins pkg:rpm/almalinux/frei0r-plugins-opencv pkg:rpm/almalinux/gnome-remote-desktop pkg:rpm/almalinux/gtk-doc pkg:rpm/almalinux/gvfs pkg:rpm/almalinux/libsoup pkg:rpm/almalinux/libsoup-devel pkg:rpm/almalinux/mutter-devel pkg:rpm/almalinux/nautilus pkg:rpm/almalinux/nautilus-devel pkg:rpm/almalinux/pipewire pkg:rpm/almalinux/pipewire-devel pkg:rpm/almalinux/pipewire-doc pkg:rpm/almalinux/pipewire-libs pkg:rpm/almalinux/pipewire-utils pkg:rpm/almalinux/pipewire0.2-devel pkg:rpm/almalinux/tracker-devel pkg:rpm/almalinux/vte-profile pkg:rpm/almalinux/vte291 pkg:rpm/almalinux/vte291-devel pkg:rpm/almalinux/webrtc-audio-processing pkg:rpm/almalinux/xdg-desktop-portal-gtk pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%205 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/almalinux/PackageKit-command-not-found pkg:rpm/almalinux/PackageKit-cron pkg:rpm/almalinux/PackageKit-glib pkg:rpm/almalinux/PackageKit-glib-devel pkg:rpm/almalinux/pipewire0.2-libs pkg:rpm/almalinux/potrace pkg:rpm/almalinux/pygobject3-devel pkg:rpm/almalinux/python3-gobject pkg:rpm/almalinux/python3-gobject-base pkg:rpm/almalinux/tracker pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.1
< 0.19.5-2.el8+ 64 more
- (no CPE)range: < 0.19.5-2.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 0.6.0-3.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 0.1.8-3.el8
- (no CPE)range: < 1.28-2.el8
- (no CPE)range: < 1.36.2-10.el8
- (no CPE)range: < 2.62.3-2.el8
- (no CPE)range: < 2.62.3-2.el8
- (no CPE)range: < 3.32.2-48.el8
- (no CPE)range: < 3.28.1-14.el8
- (no CPE)range: < 3.28.1-14.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.2.7-6.el8
- (no CPE)range: < 2.1.5-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.3-9.el8
- (no CPE)range: < 1.6.0-1.el8
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-3.3.1
- (no CPE)range: < 2.28.3-3.3.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 2.28.3-3.57.2
- (no CPE)range: < 2.28.3-2.56.1
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 0.2.7-6.el8
- (no CPE)range: < 1.15-3.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 2.1.5-2.el8
- (no CPE)range: < 2.28.3-lp151.2.21.1
Apple Inc./iTunes for Windowscpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/HT211168nvdVendor Advisory
support.apple.com/HT211171nvdVendor Advisory
support.apple.com/HT211175nvdVendor Advisory
support.apple.com/HT211177nvdBroken LinkVendor Advisory
support.apple.com/HT211178nvdVendor Advisory
support.apple.com/HT211179nvdVendor Advisory
support.apple.com/HT211181nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000