CVE-2020-3864
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-3864
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-3864.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-3864
- Related
- Published
- 2020-10-27T21:15:15Z
- Modified
- 2024-09-11T02:00:04Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.
- References
-
- https://support.apple.com/en-us/HT210918
- https://support.apple.com/en-us/HT210920
- https://support.apple.com/en-us/HT210922
- https://support.apple.com/en-us/HT210923
- https://support.apple.com/en-us/HT210947
- https://support.apple.com/en-us/HT210948
- https://security-tracker.debian.org/tracker/CVE-2020-3864
Affected packages
Debian:11 / webkit2gtk
Package
- Name
- webkit2gtk
- Purl
- pkg:deb/debian/webkit2gtk?arch=source
Debian:12 / webkit2gtk
Package
- Name
- webkit2gtk
- Purl
- pkg:deb/debian/webkit2gtk?arch=source
Debian:13 / webkit2gtk
Package
- Name
- webkit2gtk
- Purl
- pkg:deb/debian/webkit2gtk?arch=source
Debian:11 / wpewebkit
Package
- Name
- wpewebkit
- Purl
- pkg:deb/debian/wpewebkit?arch=source
Debian:12 / wpewebkit
Package
- Name
- wpewebkit
- Purl
- pkg:deb/debian/wpewebkit?arch=source
Debian:13 / wpewebkit
Package
- Name
- wpewebkit
- Purl
- pkg:deb/debian/wpewebkit?arch=source