Описание
The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 14.0 (исключая)Версия до 14.0 (исключая)Версия до 7.0 (исключая)
Одно из
cpe:2.3:a:apple:safari:14.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00247
Низкий
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-1021
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing.
EPSS
Процентиль: 48%
0.00247
Низкий
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-1021