CVE-2020-9979

EPSS 0.4%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 out 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust relationship to download malicious content.

Produtos afetados

Apple · iOS and iPadOS Apple · tvOS

Referências

http://seclists.org/fulldisclosure/2020/Nov/19 http://seclists.org/fulldisclosure/2020/Nov/20 https://support.apple.com/en-us/HT211843 https://support.apple.com/en-us/HT211850