CVE-2020-9992

7.8 highEPSS 3.0%

High (7.8) in apple. EPSS 3.0% chance of exploitation in the next 30 days.

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device during a debug session over the network.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
Published: 2020-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:ipados
apple:iphone_os
apple:xcode

References

http://seclists.org/fulldisclosure/2020/Nov/20
https://support.apple.com/HT211848
https://support.apple.com/HT211850
http://seclists.org/fulldisclosure/2020/Nov/20
https://support.apple.com/HT211848

Check your stack JSON