CVE-2020-10010

 

Published at: - 08-12-2020 09:15

Last modified: - 14-10-2022 04:46

Total changes: - 2

Description

A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://support.apple.com/en-us/HT211929
• https://support.apple.com/en-us/HT211928
• https://support.apple.com/en-us/HT211931
• https://support.apple.com/en-us/HT211930
• https://support.apple.com/kb/HT212011
• 20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1-Mailing List, Third Party Advisory
• 20201215 APPLE-SA-2020-12-14-3 macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave-Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2020-10010

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures