Vulnerabilities > CVE-2020-9993 - Improper Restriction of Rendered UI Layers or Frames vulnerability in Apple products

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
apple
CWE-1021

Summary

The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing.

Vulnerable Configurations

Part Description Count
OS
Apple
284
Application
Apple
1