Live › vulnerability › CVE-2020-9934
Go to dashboardApple iOS, iPadOS and macOS have an input validation flaw that lets a local attacker view sensitive user information. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple iOS, iPadOS, and macOS | vendor | – | – |
| apple ipados | vendor | < 13.6 | 13.6 |
| apple iphone os | vendor | < 13.6 | 13.6 |
| apple mac os x | vendor | < 10.15.6 | 10.15.6 |
Unknown from the sources.
Apply the Apple updates for iOS, iPadOS and macOS per vendor instructions; the specific fixed versions are not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.
This page as .md · .json · in your agent: get_signal("CVE-2020-9934")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.