What is CVE-2020-9858?

CVE-2020-9858 is a high-severity vulnerability in Apple Windows Migration Assistant, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2020-06-09.

How severe is CVE-2020-9858?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Apple Windows Migration Assistant

CVE-2020-9858

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.

EPSS: 0.005 (38.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Apple Windows Migration Assistant — versions unspecified
Apple Windows_migration_assistant

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

product-security@apple.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9858?: CVE-2020-9858 is a high-severity vulnerability in Apple Windows Migration Assistant, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2020-06-09.
How severe is CVE-2020-9858?: High severity. CVSS v3 base score is 7.8 out of 10.