CVE-2020-3864

high

Description

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

References

https://support.apple.com/en-us/HT210918

https://support.apple.com/en-us/HT210923

https://support.apple.com/en-us/HT210948

https://support.apple.com/en-us/HT210947

https://support.apple.com/en-us/HT210920

https://support.apple.com/en-us/HT210922

Details

Source: MITRE

Published: 2020-10-27

Updated: 2021-05-18

Type: CWE-346

Risk Information

CVSS v2

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH