CVE-2020-9843

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to a cross site scripting attack.

• CWE-79

• https://support.apple.com/HT211168Vendor Advisory
• https://support.apple.com/HT211171Vendor Advisory
• https://support.apple.com/HT211175Vendor Advisory
• https://support.apple.com/HT211177Broken Link, Vendor Advisory
• https://support.apple.com/HT211178Vendor Advisory
• https://support.apple.com/HT211179Vendor Advisory
• https://support.apple.com/HT211181Vendor Advisory
• https://support.apple.com/HT211168Vendor Advisory
• https://support.apple.com/HT211171Vendor Advisory
• https://support.apple.com/HT211175Vendor Advisory
• https://support.apple.com/HT211177Broken Link, Vendor Advisory
• https://support.apple.com/HT211178Vendor Advisory
• https://support.apple.com/HT211179Vendor Advisory
• https://support.apple.com/HT211181Vendor Advisory

Published

Jun 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9837An out-of-bounds read was addressed with improved bounds che…7.5
• CVE-2020-9838An out-of-bounds read was addressed with improved bounds che…9.8
• CVE-2020-9839A race condition was addressed with improved state handling.…7
• CVE-2020-9840In SwiftNIO Extras before 1.4.1, a logic issue was addressed…7.5
• CVE-2020-9841An integer overflow was addressed through improved input val…7.8
• CVE-2020-9842An entitlement parsing issue was addressed with improved par…7.1
• CVE-2020-9844A double free issue was addressed with improved memory manag…7.5
• CVE-2020-9846A logic issue was addressed with improved state management. …5.3
• CVE-2020-9847An out-of-bounds read was addressed with improved bounds che…8.6
• CVE-2020-9848An authorization issue was addressed with improved state man…2.4
• CVE-2020-9849An information disclosure issue was addressed with improved …6.5
• CVE-2020-9850A logic issue was addressed with improved restrictions. This…9.8