CVE-2020-9983: Apple iCloud

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.

Affected products

• Apple iCloud: version 11.5 only
• Apple iPadOS: before 14.0 (fixed in 14.0)
• Apple iPhone OS: before 14.0 (fixed in 14.0)
• Apple iTunes: version 12.10.9 only
• Apple Safari: before 14.0 (fixed in 14.0)
• Apple tvOS: version 14.0 only
• Apple watchOS: version 7.0 only
• Fedoraproject Fedora: version 32 only; version 33 only

Published 2020-10-16. Last modified 2026-06-17.