CVE-2020-3841

MEDIUM 6.5CVE-2020-3841 · Published 27/02/2020 · updated 17/06/2026

In short

CVE-2020-3841 is a MEDIUM (CVSS 6.5) vulnerability affecting safari (apple).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 45.9% of all vulnerabilities.
Fix: update to 13.0.5 or later.

Package	Affected versions	Patched versions
safari apple	`< 13.0.5`	`13.0.5`

Description

The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A local user may unknowingly send a password unencrypted over the network.

References

support.apple.com/HT210918 · Release Notes
support.apple.com/HT210922 · Release Notes

More vulnerabilities in safari

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 13.0.5

13.0.5

More vulnerabilities in safari

See all →