CVE-2020-9991

7.5HIGH

Key Information:

Vendor
Apple
Status
TV OS
Watch OS
Icloud For Windows
iOS And iPad OS
Vendor
CVE Published:
8 December 2020

Summary

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to cause a denial of service.

Affected Version(s)

iCloud for Windows < 7.21

iOS and iPadOS < 14.0

macOS < 11.0

References

https://support.apple.com/kb/HT211846
x_refsource_CONFIRM
https://support.apple.com/en-us/HT211843
x_refsource_MISC
https://support.apple.com/en-us/HT211850
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.