Not rated
CVE-2020-9860 A custom URL scheme handling issue was addressed with improved input validation
Description
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 13.0.5. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Safari 13.0 | earliest → < 13.0 | 13.0 |
References
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of Safari
The 520 CVEs of Safari →
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium
CVE-2026-113949
A type confusion issue was addressed with improved state management
8.8
High
CVE-2026-112621
An out-of-bounds write issue was addressed with improved bounds checking
7.5
High
CVE-2026-112699
An out-of-bounds read was addressed with improved bounds checking
6.5
Medium