CVE Vulnerabilities

CVE-2020-9842

Published: Jun 09, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.1
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An entitlement parsing issue was addressed with improved parsing. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application could interact with system processes to access private information and perform privileged actions.

Affected Software

NameVendorStart VersionEnd Version
IpadosApple*13.5 (excluding)
Iphone_osApple*13.5 (excluding)
Mac_os_xApple*10.15.5 (excluding)
TvosApple*13.4.5 (excluding)
WatchosApple*6.2.5 (excluding)

References