by Kastro
Paper/Archive/CVE-2020-9850

CVE-2020-9850

Apple iOS — A logic issue was addressed with improved restrictions.

EPSS 77%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.6.996 × 2019.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code execution.

Affected

ProductAffectedFixed inSource
iOSunspecified – < iOS 13.5 and iPadOS 13.5iOS 13.5 and iPadOS 13.5CNA
tvOSunspecified – < tvOS 13.4.5tvOS 13.4.5CNA
watchOSunspecified – < watchOS 6.2.5watchOS 6.2.5CNA
Safariunspecified – < Safari 13.1.1Safari 13.1.1CNA
iTunes for Windowsunspecified – < iTunes 12.10.7 for WindowsiTunes 12.10.7 for WindowsCNA
iCloud for Windowsunspecified – < iCloud for Windows 11.2iCloud for Windows 11.2CNA
iCloud for Windows (Legacy)unspecified – < iCloud for Windows 7.19iCloud for Windows 7.19CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.apple.com/HT211168refsupport.apple.com/HT211171refsupport.apple.com/HT211175refsupport.apple.com/HT211178refsupport.apple.com/HT211179refsupport.apple.com/HT211181refsupport.apple.com/HT211177