PoC Index

CVE-2020-9934

KEVMEDIUM 5.5EPSS 3.2%

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.

CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0
2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS
3.21% chance of exploitation in the next 30 days, 87th percentile
CISA KEV
added 2022-09-08
Published
2020-10-16
Updated
2025-10-21

Proof-of-concept exploits (1)

Metasploit modules (1)

References

Related