CVE-2020-9903

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. A malicious attacker may cause Safari to suggest a password for the wrong domain.

• CWE-346

• https://support.apple.com/HT211288Vendor Advisory
• https://support.apple.com/HT211292Vendor Advisory
• https://support.apple.com/HT211288Vendor Advisory
• https://support.apple.com/HT211292Vendor Advisory

Published

Oct 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9897An out-of-bounds write was addressed with improved input val…7.8
• CVE-2020-9898This issue was addressed with improved entitlements. This is…9.8
• CVE-2020-9899A memory corruption issue was addressed with improved input …7.8
• CVE-2020-9900An issue existed within the path validation logic for symlin…7.8
• CVE-2020-9901An issue existed within the path validation logic for symlin…7.8
• CVE-2020-9902An out-of-bounds read was addressed with improved bounds che…5.5
• CVE-2020-9904A memory corruption issue was addressed with improved state …7.8
• CVE-2020-9905A buffer overflow was addressed with improved bounds checkin…7.5
• CVE-2020-9906A memory corruption issue was addressed with improved input …9.1
• CVE-2020-9907A memory corruption issue was addressed by removing the vuln…7.8
• CVE-2020-9908An out-of-bounds read was addressed with improved input vali…7.1
• CVE-2020-9909An out-of-bounds read was addressed with improved bounds che…5.9