← back
CVE-2020-9994

CVE-2020-9994

EPSS 0.9%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
22 Oct 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to overwrite arbitrary files.
Affected products
Apple · iOSApple · macOSApple · tvOSApple · watchOS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://support.apple.com/kb/HT211168https://support.apple.com/kb/HT211170https://support.apple.com/kb/HT211171https://support.apple.com/kb/HT211175