CVEvulnerability
CVE-2020-9774
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-311
Description
An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted data. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Encrypted data may be inappropriately accessed.
Affected configurations
• apple mac os x (< 10.15.3)
Related
Weakness · CWE (1)
- CWE-311 Missing Encryption of Sensitive Data weakness
References
- https://support.apple.com/en-us/HT210919 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210919 Release Notes, Vendor Advisory