CVE-2020-9991

CVE Database · CVE-2020-9991

CVE-2020-9991

· HIGHModified

CVSS v3.1

7.5

EPSS

2.79%

Published

Dec 8, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to cause a denial of service.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products (7)

apple · icloud (up to 7.21)vulnerable

apple · icloud (up to 11.4)vulnerable

apple · ipados (up to 14.0)vulnerable

apple · iphone_os (up to 14.0)vulnerable

apple · mac_os_x (up to 11.0.1)vulnerable

apple · tvos (up to 14.0)vulnerable

apple · watchos (up to 7.0)vulnerable

References (16)

http://seclists.org/fulldisclosure/2020/Dec/32

Mailing ListThird Party Advisory

https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E

https://support.apple.com/en-us/HT211843

Vendor Advisory

https://support.apple.com/en-us/HT211844

Vendor Advisory

https://support.apple.com/en-us/HT211847

Vendor Advisory

https://support.apple.com/en-us/HT211850

Vendor Advisory

https://support.apple.com/en-us/HT211931

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs