VulnerabilityModified
CVE-2020-10001
A malicious application may be able to read restricted memory.
MEDIUM 5.5EPSS 1.04%
Does this matter?
Lower severity and a low EPSS score (1.04%). Track it; it rarely justifies an emergency change on its own.
Description
An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to read restricted memory.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 1.04% probability · 62th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- apple/mac os x · debian/debian linux
- Source
- product-security@apple.com
References
- https://lists.debian.org/debian-lts-announce/2021/10/msg00027.htmlMailing List, Third Party Advisory
- https://support.apple.com/en-us/HT212011Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2021/10/msg00027.htmlMailing List, Third Party Advisory
- https://support.apple.com/en-us/HT212011Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.