CVE-2020-9781: Apple iPadOS

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user may grant website permissions to a site they didn't intend to.

Affected products

• Apple iPadOS: before 13.4 (fixed in 13.4)
• Apple iPhone OS: before 13.4 (fixed in 13.4)

Published 2020-04-01. Last modified 2026-06-17.