CVE-2020-9860

A custom URL scheme handling issue was addressed with improved input validation

published October 27, 2020

CVSS
—
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 13.0.5. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01030 · 63.4th percentile
Published
2020-10-27T20:42Z
EPSS history
Timeline
  • 27 OCT 20:42Z
    A custom URL scheme handling issue was addressed with improved input validation
    cvelistv5