← Back to browse · API

CVE-2020-9934

Severity
MEDIUM
CVSS
5.5
EPSS
0.03208
Risk score
48.12
CISA KEV
Yes
PoC
No
Published
2020-10-16
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2020-30713, GHSA-X5M3-93G8-F3RH
Products
Apple:iOS, iPadOS, and macOS, Apple:macOS unspecified <macOS Catalina 10.15.6, Cisco:IOS unspecified <iOS 13.6 and iPadOS 13.6
Sources
euvd EUVD-2020-30713
cisa.gov CVE-2020-9934

Description

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.

References