What is CVE-2020-9775?

CVE-2020-9775 is a medium-severity vulnerability in Apple Ios, classified under Improper Initialization. CVSS score: 5.3/10. Published 2020-04-01.

How severe is CVE-2020-9775?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Apple Ios

CVE-2020-9775

An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time.

Vulnerability class: Dirty Pipe (CVE-2022-0847)

EPSS: 0.009 (54.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-665 — Improper Initialization

References

product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@apple.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9775?: CVE-2020-9775 is a medium-severity vulnerability in Apple Ios, classified under Improper Initialization. CVSS score: 5.3/10. Published 2020-04-01.
How severe is CVE-2020-9775?: Medium severity. CVSS v3 base score is 5.3 out of 10.