CVE-2020-11024: Moonlight-Stream Moonlight

High severity, CVSS 8.2. EPSS: 0.8% chance of exploitation in the next 30 days.

In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvOS.

Affected products

• Moonlight-Stream Moonlight: before 4.0.1 (fixed in 4.0.1)

Published 2020-04-29. Last modified 2026-06-17.