CVE-2020-9854

EPSS 0.4%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

22 oct 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A logic issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. An application may be able to gain elevated privileges.

Productos afectados

Apple · iOS Apple · macOS Apple · tvOS

Referencias

https://support.apple.com/kb/HT211168 https://support.apple.com/kb/HT211170 https://support.apple.com/kb/HT211171