Not rated
CVE-2020-10010 A path handling issue was addressed with improved validation
Description
A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| watchOS 7.1 | earliest → < 7.1 | 7.1 |
| iOS and iPadOS 14.2 | earliest → < 14.2 | 14.2 |
| tvOS 14.2 | earliest → < 14.2 | 14.2 |
| macOS 11.0 | earliest → < 11.0 | 11.0 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1 seclists.org
- 20201215 APPLE-SA-2020-12-14-3 macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave seclists.org
Timeline
- Published
- Last modified
Other CVEs of watchOS
The 1458 CVEs of watchOS →
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-86964
A null pointer dereference was addressed with improved input validation
7.5
High
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium
CVE-2026-112682
An input validation issue was addressed with improved input validation
7.5
High