CVE-2020-9862

CVE-2020-9862: falha em Apple iOS

Publicada em 16 out 2020 · Atualizada em 04 ago 2024

Seguir esta CVE + Monitorar iOS + Monitorar watchOS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.9%

A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Copying a URL from Web Inspector may lead to command injection.

Produtos afetados

Apple · iCloud for Windows Apple · iCloud for Windows (Legacy)Apple · iOS Apple · iTunes for Windows Apple · Safari Apple · tvOS Apple · watchOS

CVEs relacionadas — Apple iOS

No mesmo produto, das mais perigosas para as menos.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2019-8605HIGHCVE-2019-8605EPSS 17.6%KEV CVE-2019-8506HIGHCVE-2019-8506EPSS 16.2%KEV CVE-2019-7286HIGHCVE-2019-7286EPSS 15.9%KEV CVE-2020-3837HIGHCVE-2020-3837EPSS 14.8%KEV CVE-2021-30858HIGHCVE-2021-30858EPSS 13.4%KEV

Referências

https://support.apple.com/HT211288 https://support.apple.com/HT211290 https://support.apple.com/HT211291 https://support.apple.com/HT211292 https://support.apple.com/HT211293 https://support.apple.com/HT211294 https://support.apple.com/HT211295