CVE-2020-9854

high

Description

A logic issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. An application may be able to gain elevated privileges.

References

https://support.apple.com/kb/HT211168

https://support.apple.com/kb/HT211170

https://support.apple.com/kb/HT211171

Details

Source: MITRE

Published: 2020-10-22

Updated: 2020-10-28

Type: NVD-CWE-noinfo

Risk Information

CVSS v2

Base Score: 4.6

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH