Medium severity5.5NVD Advisory· Published Dec 8, 2020· Updated Jun 17, 2026

CVE-2020-9977

Description

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to determine a user's open tabs in Safari.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./macOSv52 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- (no CPE)range: <11.0.1
Apple Inc./Safarillm-fuzzy
Apple Inc./iOSllm-fuzzy
Range: <14.0
Apple Inc./Ipadosllm-fuzzy2 versions
<14.0+ 1 more
- (no CPE)range: <14.0
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <14.2
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <14.2
Apple Inc./Mac OS X
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Range: <11.0.1
Apple Inc./iOS and iPadOScpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2020/Dec/32nvdMailing ListThird Party Advisory
support.apple.com/en-us/HT211850nvdVendor Advisory
support.apple.com/en-us/HT211931nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000