Skip to main content

Ipad Os CVE-2020-9787

MEDIUM
2020-10-22 product-security@apple.com
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Oct 22, 2020 - 18:15 nvd
MEDIUM 5.3

DescriptionNVD

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences.

AnalysisAI

A logic issue was addressed with improved restrictions. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences. Affected products include: Apple Ipad Os, Apple Iphone Os, Apple Mac Os X, Apple Tvos, Apple Watchos.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2021-1818 CRITICAL
9.8 Apr 02

A logic issue was addressed with improved state management. Rated critical severity (CVSS 9.8), this vulnerability is re

CVE-2021-1796 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil

CVE-2021-1795 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil

CVE-2021-1794 CRITICAL
9.8 Apr 02

An out-of-bounds read was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabili

CVE-2024-23226 HIGH
8.8 Mar 08

The issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely ex

CVE-2022-22637 HIGH
8.8 Sep 23

A logic issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remote

CVE-2022-22628 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability

CVE-2022-22624 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability

CVE-2022-22610 HIGH
8.8 Sep 23

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerabili

CVE-2020-3901 HIGH
8.8 Apr 01

A type confusion issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability i

CVE-2020-3900 HIGH
8.8 Apr 01

A memory corruption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabilit

CVE-2020-3899 HIGH
8.8 Apr 01

A memory consumption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabili

Share

CVE-2020-9787 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy