CVE-2020-9903

No fix known EPSS <1%

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. A malicious attacker may cause Safari to suggest a password for the wrong domain.

Published 2020-10-16 · CVE record · OSV

Products: Apple iOS, apple safari