Vulnerabilities > Apple > Safari > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-10-27 | CVE-2019-8771 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Apple Safari This issue was addressed with improved iframe sandbox enforcement. | 6.1 |
| 2020-10-27 | CVE-2019-8762 | Cross-site Scripting vulnerability in Apple products A validation issue was addressed with improved logic. | 6.1 |
| 2020-10-27 | CVE-2019-8570 | Unspecified vulnerability in Apple products A logic issue was addressed with improved state management. | 6.5 |
| 2020-10-27 | CVE-2018-4444 | Unspecified vulnerability in Apple products A logic issue was addressed with improved state management. | 6.5 |
| 2020-10-16 | CVE-2020-9925 | Cross-site Scripting vulnerability in Apple products A logic issue was addressed with improved state management. | 6.1 |
| 2020-10-16 | CVE-2020-9916 | Unspecified vulnerability in Apple products A URL Unicode encoding issue was addressed with improved state management. | 5.3 |
| 2020-10-16 | CVE-2020-9915 | Unspecified vulnerability in Apple products An access issue existed in Content Security Policy. | 6.5 |
| 2020-10-16 | CVE-2020-9894 | Out-of-bounds Read vulnerability in Apple products An out-of-bounds read was addressed with improved input validation. | 4.3 |
| 2020-07-22 | CVE-2020-6514 | Information Exposure vulnerability in multiple products Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream. | 6.5 |
| 2020-06-09 | CVE-2020-9801 | Unspecified vulnerability in Apple Safari A logic issue was addressed with improved restrictions. | 5.3 |