CVE-2020-9976: Apple iPadOS

Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0. A malicious application may be able to leak sensitive user information.

Affected products

• Apple iPadOS: before 14.0 (fixed in 14.0)
• Apple iPhone OS: before 14.0 (fixed in 14.0)
• Apple tvOS: before 14.0 (fixed in 14.0)
• Apple watchOS: before 7.0 (fixed in 7.0)

Published 2020-10-16. Last modified 2026-06-17.