CVE-2020-9979

EPSS 0.4%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 oct 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust relationship to download malicious content.

Productos afectados

Apple · iOS and iPadOS Apple · tvOS

Referencias

http://seclists.org/fulldisclosure/2020/Nov/19 http://seclists.org/fulldisclosure/2020/Nov/20 https://support.apple.com/en-us/HT211843 https://support.apple.com/en-us/HT211850