CVE-2020-9934 · netVigilance record NV22-0508

Apple iOS, iPadOS, and macOS Input Validation

past due

What to do

Apply updates per vendor instructions.

CISA deadline 2022-09-29 · passed 3 years 11 months ago · applies to US federal civilian agencies; used elsewhere as a reference SLA

What happened

Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.

Who is affected

Apple iOS, iPadOS, and macOS. Affected version ranges are listed in the vendor advisory and the NVD entry linked under Sources.

Timeline

2022-09-08
Added to CISA KEVExploitation in the wild confirmed by CISA
2022-09-29
CISA remediation deadlinepassed 3 years 11 months ago

Sources

NVD entry for CVE-2020-9934 nvd.nist.gov/vuln/detail/CVE-2020-9934
CISA Known Exploited Vulnerabilities catalog www.cisa.gov/known-exploited-vulnerabilities-catalog
support.apple.com support.apple.com/en-us/HT211288
support.apple.com support.apple.com/en-us/HT211289
nvd.nist.gov nvd.nist.gov/vuln/detail/CVE-2020-9934