Home / Vulnerabilities / CVE-2020-9859
HIGH SEVERITY
CVE-2020-9859 Apple · Multiple Products

Apple Multiple Products Code Execution Vulnerability

Technical Severity

CVSS v3.1 Metrics

HIGH
7.8 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation Likelihood

EPSS Prediction

0.17 %
Predictive Probability
Percentile Rank
38.2 th

Documented as more likely to be exploited than 38.2% of known CVEs.

Detection Date

Nov 03, 2021

Remediation Due

May 03, 2022

CISA Catalog Active

Threat Analysis

Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.

Remediation Directive

Apply updates per vendor instructions.

External Intelligence