VulnerabilityModified
CVE-2020-3918
An access issue was addressed with additional sandbox restrictions.
MEDIUM 5.5EPSS 0.29%
Does this matter?
Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.
Description
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A local user may be able to view sensitive user information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.29% probability · 22th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipad os · apple/iphone os · apple/mac os x · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/kb/HT211100Vendor Advisory
- https://support.apple.com/kb/HT211101Vendor Advisory
- https://support.apple.com/kb/HT211102Vendor Advisory
- https://support.apple.com/kb/HT211103Vendor Advisory
- https://support.apple.com/kb/HT211100Vendor Advisory
- https://support.apple.com/kb/HT211101Vendor Advisory
- https://support.apple.com/kb/HT211102Vendor Advisory
- https://support.apple.com/kb/HT211103Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.