Vulnerability in Apple Icloud For Windows
CVE-2020-9991
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to cause a denial of service.
EPSS: 0.021 (84.5th percentile) — read the EPSS interpretation.
Affected products
- Apple Icloud For Windows — versions unspecified
- Apple Ios And Ipados — versions unspecified
- Apple Macos — versions unspecified
- Apple Tvos — versions unspecified
- Apple Watchos — versions unspecified
Public proof-of-concept exploits
References
- support.apple.com/kb/HT211846 (x_refsource_CONFIRM)
- support.apple.com/en-us/HT211843 (x_refsource_MISC)
- support.apple.com/en-us/HT211850 (x_refsource_MISC)
- support.apple.com/en-us/HT211844 (x_refsource_MISC)
- support.apple.com/en-us/HT211931 (x_refsource_MISC)
- support.apple.com/en-us/HT211847 (x_refsource_MISC)
- 20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1 (mailing-list, x_refsource_FULLDISC)
- [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar (mailing-list, x_refsource_MLIST)
Frequently asked questions
- What is CVE-2020-9991?
- CVE-2020-9991 is a vulnerability in Apple Icloud For Windows. Published 2020-12-08.
- Is CVE-2020-9991 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.