CVE-2020-9979

A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust relationship to download malicious content.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2020-10-27

Last modified

2024-08-04

Affected products

• Ios And Ipados (Apple)
• Ipados (Apple)
• Iphone Os (Apple)
• Tvos (Apple)

References

• http://seclists.org/fulldisclosure/2020/Nov/19
• http://seclists.org/fulldisclosure/2020/Nov/20
• https://support.apple.com/en-us/HT211843
• https://support.apple.com/en-us/HT211850