9.3

CVE-2020-10013

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 14.0
Apple ≫ iPhone OS Version < 14.0
Apple ≫ macOS X Version >= 10.13.0 < 10.13.6
Apple ≫ macOS X Version >= 10.14.0 < 10.14.6
Apple ≫ macOS X Version >= 10.15 < 10.15.7
Apple ≫ tvOS Version < 14.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.45
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
https://support.apple.com/kb/HT211849
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT211850
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT211843
Vendor Advisory
Release Notes