CVE-2020-9991

HIGH

7.5

CVSS Score

Published: December 8, 2020 at 09:11 PM UTC

Updated: June 17, 2026 at 03:28 AM UTC

6 products affected across 1 vendormacOSiPhone OSiPadOS

Using tvOS by Apple?

Get instant alerts when new vulnerabilities affect tvOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 3%

Description

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to cause a denial of service.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

iCloud · Apple

95%

v < 7.2111.0 ≤ v < 11.4

Affected range stops below 11.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.21, so it looks safe — our inference, not a vendor statement

iPadOS · Apple

95%

v < 14.0

Affected range stops below 14.0, so it looks safe — our inference, not a vendor statement

iPhone OS · Apple

95%

v < 14.0

Affected range stops below 14.0, so it looks safe — our inference, not a vendor statement

macOS · Apple

95%

v < 11.0v < 11.0.1

Affected range stops below 11.0, so it looks safe — our inference, not a vendor statement

Affected range stops below 11.0.1, so it looks safe — our inference, not a vendor statement

tvOS · Apple

95%

v < 14.0

Affected range stops below 14.0, so it looks safe — our inference, not a vendor statement

watchOS · Apple

95%

v < 7.0

Affected range stops below 7.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (8)

Mailing Listx_refsource_FULLDISCThird Party Advisory

Source: [email protected]

http://seclists.org/fulldisclosure/2020/Dec/32

Mailing Listx_refsource_MLIST

Source: [email protected]

https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E