Skip to main content

Ipad Os CVE-2020-3918

MEDIUM
2020-10-22 product-security@apple.com
Information Disclosure Apple Ipad Os Iphone Os Mac Os X Tvos Watchos
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Oct 22, 2020 - 18:15 nvd
MEDIUM 5.5

DescriptionNVD

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A local user may be able to view sensitive user information.

AnalysisAI

An access issue was addressed with additional sandbox restrictions. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A local user may be able to view sensitive user information. Affected products include: Apple Ipad Os, Apple Iphone Os, Apple Mac Os X, Apple Tvos, Apple Watchos.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ipad Os

View all
CVE-2021-1818 CRITICAL
9.8 Apr 02

A logic issue was addressed with improved state management. Rated critical severity (CVSS 9.8), this vulnerability is re
CVE-2021-1796 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
CVE-2021-1795 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
CVE-2021-1794 CRITICAL
9.8 Apr 02

An out-of-bounds read was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabili
CVE-2024-23226 HIGH
8.8 Mar 08

The issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely ex
CVE-2022-22637 HIGH
8.8 Sep 23

A logic issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remote
CVE-2022-22628 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
CVE-2022-22624 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
CVE-2022-22610 HIGH
8.8 Sep 23

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerabili
CVE-2020-3901 HIGH
8.8 Apr 01

A type confusion issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability i
CVE-2020-3900 HIGH
8.8 Apr 01

A memory corruption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabilit
CVE-2020-3899 HIGH
8.8 Apr 01

A memory consumption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabili

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2020-3918 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy