CVE-2020-9859 — Apple Multiple Products Code Execution Vulnerability

provenance: imported · CVE: CVE-2020-9859

CVE-2020-9859: Apple Multiple Products Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apple
Product	Multiple Products
Date added	2021-11-03
Due date	2022-05-03
Ransomware campaign use	Unknown

Description

Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-9859

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-9859
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog