Read the docs
TI-2020-08025 Aliases CVE-2020-9952GHSA-2hf4-pxq2-63h5

Cross-site scripting in Apple iOS

Priority LOW 34CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Partial Red Hat: 3 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-79.

Summary

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.

Why it matters now

EPSS 0.01497 74th percentileScored 2026-11-07
Fix Partial iOS (Apple): iOS 14.0 and iPadOS 14.0tvOS (Apple): tvOS 14.0+4 more productsRed Hat: 2 advisoriesRed Hat: 3 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AppleiOSbefore iOS 14.0 and iPadOS 14.0iOS 14.0 and iPadOS 14.0Patch availableCNA
AppletvOSbefore tvOS 14.0tvOS 14.0Patch availableCNA
ApplewatchOSbefore watchOS 7.0watchOS 7.0Patch availableCNA
AppleSafaribefore Safari 14.0Safari 14.0Patch availableCNA
AppleiCloud for Windowsbefore iCloud for Windows 11.4iCloud for Windows 11.4Patch availableCNA
AppleiCloud for Windows (Legacy)before iCloud for Windows 7.21iCloud for Windows 7.21Patch availableCNA
  • iOS VendorApple Affected before iOS 14.0 and iPadOS 14.0 Fixed in iOS 14.0 and iPadOS 14.0 Patch available CNA
  • tvOS VendorApple Affected before tvOS 14.0 Fixed in tvOS 14.0 Patch available CNA
  • watchOS VendorApple Affected before watchOS 7.0 Fixed in watchOS 7.0 Patch available CNA
  • Safari VendorApple Affected before Safari 14.0 Fixed in Safari 14.0 Patch available CNA
  • iCloud for Windows VendorApple Affected before iCloud for Windows 11.4 Fixed in iCloud for Windows 11.4 Patch available CNA
  • iCloud for Windows (Legacy) VendorApple Affected before iCloud for Windows 7.21 Fixed in iCloud for Windows 7.21 Patch available CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*before 7.21; 11.0 to before 11.4VulnerableApple
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*before 14.0VulnerableApple
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*before 14.0VulnerableApple
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*before 14.0VulnerableApple
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*before 14.0VulnerableApple
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*before 7.0VulnerableApple
cpe:2.3:a:webkit:webkitgtk\+:*:*:*:*:*:*:*:*up to 2.30.3VulnerableWebKit
  • cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:* Versions before 7.21; 11.0 to before 11.4 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* Versions before 14.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* Versions before 14.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions before 14.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* Versions before 14.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* Versions before 7.0 Vulnerable ·Apple
  • cpe:2.3:a:webkit:webkitgtk\+:*:*:*:*:*:*:*:* Versions up to 2.30.3 Vulnerable ·WebKit

Remediation

  • Fix · CNA iOS (Apple) Fixed in iOS 14.0 and iPadOS 14.0
  • Fix · CNA tvOS (Apple) Fixed in tvOS 14.0
  • Fix · CNA watchOS (Apple) Fixed in watchOS 7.0
  • Fix · CNA Safari (Apple) Fixed in Safari 14.0
  • Fix · CNA iCloud for Windows (Apple) Fixed in iCloud for Windows 11.4
  • Fix · CNA iCloud for Windows (Legacy) (Apple) Fixed in iCloud for Windows 7.21

Red Hat 2 advisories

  • RHSA-2025:10364 Released 2025-07-07 · Red Hat rating Important
    webkitgtk4 security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) webkitgtk4-2.48.3-2.el7_9, webkitgtk4-devel-2.48.3-2.el7_9, webkitgtk4-jsc-2.48.3-2.el7_9 +1
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) webkitgtk4-devel-2.48.3-2.el7_9, webkitgtk4-doc-2.48.3-2.el7_9, webkitgtk4-jsc-devel-2.48.3-2.el7_9
  • RHSA-2020:4451 Released 2020-11-04 · Red Hat rating Moderate
    GNOME security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder (v. 8) LibRaw-devel-0.19.5-2.el8
    • Red Hat Enterprise Linux AppStream (v. 8) LibRaw-0.19.5-2.el8, gnome-settings-daemon-3.32.0-11.el8, webkit2gtk3-2.28.4-1.el8 +3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Apple iOS iOS 14.0 and iPadOS 14.0

    8 records Highest priority Priority LOW 8 LOW

    Other records, highest priority first

    • TI-2020-08062 Apple iOS: An attacker in a privileged network position may be able to execute arbitrary…Priority LOW 39
    • TI-2020-08029 Out-of-bounds write in Apple iOSPriority LOW 36
    • TI-2020-08019 Apple iOS: The screen lock may not engage after the specified time periodPriority LOW 30
    Show all 8 records →
  • Release ·

    Apple watchOS watchOS 7.0

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2020-08019 Apple iOS: The screen lock may not engage after the specified time periodPriority LOW 30
    • TI-2020-08046 Apple iOS: A malicious application may be able to leak sensitive user informationPriority LOW 27
    • TI-2020-08039 Apple iOS: A malicious application may be able to access restricted filesPriority LOW 27
    Show all 4 records →
Show 1 more group
  • Release ·

    Apple tvOS tvOS 14.0

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2020-08046 Apple iOS: A malicious application may be able to leak sensitive user informationPriority LOW 27
    • TI-2020-08039 Apple iOS: A malicious application may be able to access restricted filesPriority LOW 27
    Show all 3 records →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2020:4451
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:10364
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:10364
Not affected: 3 products
  • Red Hat CodeReady Linux Builder (v. 8)
  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux BaseOS (v. 8)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-9952
  2. 2026-10-03 Alias added: GHSA-2hf4-pxq2-63h5

References

Advisory 11

Other 1

  • TI-2019-06084 Type confusion in Apple iOS KEVCVSS 3.1HIGH 8.8
  • TI-2020-16987 Type confusion in Apple watchOS KEVCVSS 3.1HIGH 7.8
  • TI-2020-07926 Apple iOS: A remote attacker may be able to cause arbitrary code execution CVSS 3.1CRITICAL 9.8
  • TI-2018-03187 Memory corruption in Apple WebKit CVSS 3.1HIGH 8.8
  • TI-2018-03118 Memory corruption in Apple WebKit CVSS 3.0HIGH 8.8
  • TI-2018-03361 Memory corruption in iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows CVSS 3.0HIGH 8.8
See all 448 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences