CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-10-16
Apple iOS, iPadOS, and macOS Environment Variable Handling Information Disclosure (CVE-2020-9934)
[Affected Scope] Apple iOS and iPadOS versions prior to 13.6, and macOS Catalina versions prior to 10.15.6
[Impact] A local attacker can exploit improper validation of environment variables to bypass security boundaries and view sensitive user information
[Mitigation] Immediately update affected devices to iOS/iPadOS 13.6, macOS Catalina 10.15.6, or later versions