Lucene search

PRIOn knowledge basePRION:CVE-2020-9926

HistoryApr 02, 2021 - 6:15 p.m.

Design/Logic Flaw

2021-04-0218:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

44.0%

JSON

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iCloud for Windows 7.20, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

CPENameOperatorVersion
icloudlt7.20
ipadoslt13.6
iphone_oslt13.6
mac_os_xlt10.13.6
mac_os_xge10.14
mac_os_xlt10.14.6
mac_os_xeq10.14.6
mac_os_xeq10.14.6
mac_os_xeq10.14.6
mac_os_xeq10.14.6

Name	Operator	Version
icloud	lt	7.20
ipados	lt	13.6
iphone_os	lt	13.6
mac_os_x	lt	10.13.6
mac_os_x	ge	10.14
mac_os_x	lt	10.14.6
mac_os_x	eq	10.14.6
mac_os_x	eq	10.14.6
mac_os_x	eq	10.14.6
mac_os_x	eq	10.14.6

Rows per page:

1-10 of 351

References

support.apple.com/en-us/HT211288

support.apple.com/en-us/HT211289

support.apple.com/en-us/HT211290

support.apple.com/en-us/HT211291

support.apple.com/en-us/HT211295

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

44.0%

JSON

Related for PRION:CVE-2020-9926