Ubuntu.comUB:CVE-2020-9926CVE-2020-9926
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
44.4%
A use after free issue was addressed with improved memory management. This
issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8,
iCloud for Windows 7.20, macOS Catalina 10.15.6, Security Update 2020-004
Mojave, Security Update 2020-004 High Sierra. Processing maliciously
crafted XML may lead to an unexpected application termination or arbitrary
code execution.
Notes
| Author | Note |
|---|---|
| mdeslaur | no details on this affecting anything other then macOS |
References
launchpad.net/bugs/cve/CVE-2020-9926
nvd.nist.gov/vuln/detail/CVE-2020-9926
security-tracker.debian.org/tracker/CVE-2020-9926
support.apple.com/en-us/HT211288
support.apple.com/en-us/HT211289
support.apple.com/en-us/HT211290
support.apple.com/en-us/HT211291
support.apple.com/en-us/HT211295
www.cve.org/CVERecord?id=CVE-2020-9926
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
44.4%