CVE-2020-9947: vulnerability in Apple watchOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.8%
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected products
Apple · iCloud for WindowsApple · iOS and iPadOSApple · iTunes for WindowsApple · SafariApple · tvOSApple · watchOSRelated CVEs — Apple watchOS
In the same product, most dangerous first.
References
https://security.gentoo.org/glsa/202104-03https://support.apple.com/en-us/HT211843https://support.apple.com/en-us/HT211844https://support.apple.com/en-us/HT211845https://support.apple.com/en-us/HT211850https://support.apple.com/en-us/HT211935https://support.apple.com/en-us/HT211952http://www.openwall.com/lists/oss-security/2021/03/22/1