medium5.5
CVE-2020-9976
A logic issue was addressed with improved state management.
Impact
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0. A malicious application may be able to leak sensitive user information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 14.0 |
| Apple | Iphone Os | before 14.0 |
| Apple | Tvos | before 14.0 |
| Apple | Watchos | before 7.0 |
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- http://seclists.org/fulldisclosure/2020/Nov/22
- https://support.apple.com/HT211843
- https://support.apple.com/HT211844
- https://support.apple.com/HT211850
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- http://seclists.org/fulldisclosure/2020/Nov/22
- https://support.apple.com/HT211843
- https://support.apple.com/HT211844
- https://support.apple.com/HT211850