CVE-2020-9979: Apple iPadOS

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust relationship to download malicious content.

Affected products

• Apple iPadOS: before 14.0 (fixed in 14.0)
• Apple iPhone OS: before 14.0 (fixed in 14.0)
• Apple tvOS: before 14.0 (fixed in 14.0)

Published 2020-10-27. Last modified 2026-06-17.