CVE-2020-3864

Katalog CVE

CVSS 7.8 · High EPSS 0,40%

Kerentanan Origin Validation Error pada apple icloud, apple itunes +7 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

Rincian

Terbit di NVD

27 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-346: Origin Validation Error

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT210918 release notes · advisory vendor
• https://support.apple.com/en-us/HT210920 release notes · advisory vendor
• https://support.apple.com/en-us/HT210922 release notes · advisory vendor
• https://support.apple.com/en-us/HT210923 release notes · advisory vendor
• https://support.apple.com/en-us/HT210947 release notes · advisory vendor
• https://support.apple.com/en-us/HT210948 release notes · advisory vendor