CVE-2020-9823

HIGH

iPadOS < 13.5 - Unauthenticated State Manipulation in iMessage Conversation

Title source: llm

Description

This issue was addressed with improved checks. This issue is fixed in iOS 13.5 and iPadOS 13.5. Users removed from an iMessage conversation may still be able to alter state.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/HT211168

Scores

CVSS v3 7.5

EPSS 0.0081

EPSS Percentile 53.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

Status published

Products (2)

apple/ipados < 13.5

apple/iphone_os < 13.5

Published Jun 09, 2020

Tracked Since Feb 18, 2026