Vulnerabilities > CVE-2020-9987 - Improper Restriction of Rendered UI Layers or Frames vulnerability in Apple Safari

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

apple

CWE-1021

NVD

Published: 2020-12-08

Updated: 2020-12-09

Summary

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. Visiting a malicious website may lead to address bar spoofing.

Vulnerable Configurations

Part	Description	Count
Application	Apple Apple Safari - Apple Safari 1.0 Apple Safari 1.0.0 Apple Safari 1.0.0B1 Apple Safari 1.0.0B2 Apple Safari 1.0.1 Apple Safari 1.0.2 Apple Safari 1.0.3 Apple Safari 1.0B1 Apple Safari 1.1 Apple Safari 1.1.0 Apple Safari 1.1.1 Apple Safari 1.2 Apple Safari 1.2.0 Apple Safari 1.2.1 Apple Safari 1.2.2 Apple Safari 1.2.3 Apple Safari 1.2.4 Apple Safari 1.2.5 Apple Safari 1.3 Apple Safari 1.3.0 Apple Safari 1.3.1 Apple Safari 1.3.2 Apple Safari 2 Apple Safari 2.0 Apple Safari 2.0.0 Apple Safari 2.0.1 Apple Safari 2.0.2 Apple Safari 2.0.3 Apple Safari 2.0.4 Apple Safari 3 Apple Safari 3.0 Apple Safari 3.0.0 Apple Safari 3.0.0B Apple Safari 3.0.1 Apple Safari 3.0.1B Apple Safari 3.0.2 Apple Safari 3.0.2B Apple Safari 3.0.3 Apple Safari 3.0.3B Apple Safari 3.0.4 Apple Safari 3.0.4B Apple Safari 3.0.5 Apple Safari 3.1.0 Apple Safari 3.1.0B Apple Safari 3.1.1 Apple Safari 3.1.1B Apple Safari 3.1.2 Apple Safari 3.1.2B Apple Safari 3.2.0 Apple Safari 3.2.0B Apple Safari 3.2.1 Apple Safari 3.2.1B Apple Safari 3.2.2 Apple Safari 3.2.2B Apple Safari 4.0 Apple Safari 4.0.0B Apple Safari 4.0.1 Apple Safari 4.0.2 Apple Safari 4.0.3 Apple Safari 4.0.4 Apple Safari 4.0.5 Apple Safari 4.1 Apple Safari 4.1.1 Apple Safari 4.1.2 Apple Safari 4.1.3 Apple Safari 5.0 Apple Safari 5.0.1 Apple Safari 5.0.2 Apple Safari 5.0.3 Apple Safari 5.0.4 Apple Safari 5.0.5 Apple Safari 5.0.6 Apple Safari 5.1 Apple Safari 5.1.1 Apple Safari 5.1.2 Apple Safari 5.1.3 Apple Safari 5.1.4 Apple Safari 5.1.5 Apple Safari 5.1.6 Apple Safari 5.1.7 Apple Safari 6.0 Apple Safari 6.0.1 Apple Safari 6.0.2 Apple Safari 6.0.3 Apple Safari 6.0.4 Apple Safari 6.0.5 Apple Safari 6.1 Apple Safari 6.1.1 Apple Safari 6.1.2 Apple Safari 6.1.3 Apple Safari 6.1.4 Apple Safari 6.1.5 Apple Safari 6.2.1 Apple Safari 6.2.4 Apple Safari 6.2.5 Apple Safari 6.2.6 Apple Safari 6.2.8 Apple Safari 7.0 Apple Safari 7.0.1 Apple Safari 7.0.2 Apple Safari 7.0.3 Apple Safari 7.0.4 Apple Safari 7.0.5 Apple Safari 7.1 Apple Safari 7.1.1 Apple Safari 7.1.4 Apple Safari 7.1.5 Apple Safari 7.1.6 Apple Safari 7.1.8 Apple Safari 8.0 Apple Safari 8.0.1 Apple Safari 8.0.4 Apple Safari 8.0.5 Apple Safari 8.0.6 Apple Safari 8.0.8 Apple Safari 9.0.1 Apple Safari 9.0.2 Apple Safari 9.0.3 Apple Safari 9.1 Apple Safari 9.1.1 Apple Safari 9.1.3 Apple Safari 10.0.0 Apple Safari 10.0.1 Apple Safari 10.0.2 Apple Safari 10.0.3 Apple Safari 10.1 Apple Safari 10.1.1 Apple Safari 10.1.2 Apple Safari 11.0 Apple Safari 11.0.1 Apple Safari 11.0.2 Apple Safari 11.0.3 Apple Safari 11.1 Apple Safari 11.1.1 Apple Safari 11.1.2 Apple Safari 12 Apple Safari 12.0 Apple Safari 12.0.1 Apple Safari 12.0.2 Apple Safari 12.0.3 Apple Safari 12.1 Apple Safari 12.1.1 Apple Safari 12.1.2 Apple Safari 13 Apple Safari 13.0.1 Apple Safari 13.0.3 Apple Safari 13.0.4 Apple Safari 13.0.5 Apple Safari 13.1 Apple Safari 13.1.1 Apple Safari 13.1.2	177

Common Weakness Enumeration (CWE)

CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

References

https://support.apple.com/en-us/HT211845