Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-10003

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple watchOS

  • unspecified to < 7.1affected

Apple iOS and iPadOS

  • unspecified to < 14.2affected

Apple tvOS

  • unspecified to < 14.2affected

Apple macOS

  • unspecified to < 11.0affected

References