{"metadata": {"vulnerability": "CVE-2020-9992", "count": 32, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 21}}, "data": [{"timestamp": "2020-03-02T00:00:00Z", "date_only": false, "value": "2020-03-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-9992", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-09-16T00:00:00Z", "date_only": false, "value": "2020-09-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_release_date.data.5.date"}, {"timestamp": "2020-09-18T06:51:56Z", "date_only": false, "value": "2020-09-18T06:51:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/40439", "record": "CVE-2020-9992", "field": "creation_timestamp", "uuid": "9109567d-7bc0-4f48-a4c2-77fee38399d8", "content": "Apple release updates for iOS and iPadOS operating systems that fixes several security iPhone, iPad, and iPod devices. With the security update, Apple addressed 11 bugs in various products and components such as AppleAVD, Apple Keyboard, WebKit, and Siri. Among the fixed vulnerabilities the high severity one is CVE-2020-9992, which allows attackers to execute arbitrary [\u2026]\nThe post Apple High Severity Bug Allows Attackers to Execute Arbitrary Code on iPhone, iPad, iPod (https://gbhackers.com/apple-high-severity-flaw/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/40439"}, {"timestamp": "2020-09-18T13:27:51Z", "date_only": false, "value": "2020-09-18T13:27:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/952", "record": "CVE-2020-9992", "field": "creation_timestamp", "uuid": "f52bec16-c082-45b8-9b28-5bbe24bb869d", "content": "\u200b\u200b\u0412\u0441\u0435-\u0442\u0430\u043a\u0438 \u043c\u044b \u043d\u0435 \u0437\u0440\u044f \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u043b\u0438 \u0432\u0441\u0435\u0445 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u0430\u043f\u0434\u0435\u0439\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 Apple \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041a\u0440\u043e\u043c\u0435 \u043d\u043e\u0432\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0432\u0447\u0435\u0440\u0430, \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c iOS 14 \u0438 iPadOS 14.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438 \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u043b\u0430\u0441\u044c \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e, - \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Apple \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0414\u0430\u0432\u043d\u043e \u0443\u0436\u0435 \u043c\u0438\u043d\u0443\u043b\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u0430, \u043a\u043e\u0433\u0434\u0430 \u044f\u0431\u043b\u043e\u0447\u043d\u043e\u0435 \u041f\u041e \u0441\u0447\u0438\u0442\u0430\u043b\u043e\u0441\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c. \u0412 \u043d\u043e\u0432\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 \u0441\u0432\u043e\u0438\u0445 \u041e\u0421 Apple \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 11 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e RCE.\n\n\u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443, CVE-2020-9992, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f 7,3 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u0435\u0441\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043d\u0430 \u0441\u043e\u043f\u0440\u044f\u0436\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0442, \u043d\u043e \u043f\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 IBM X-Force \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Xcode, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 macOS 10.15.4 - 10.15.6 (\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437). \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043f\u043e\u043b\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0442\u044c \u0438 \u044f\u0431\u043b\u043e\u0431\u0443\u043a\u0438.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2020-9959 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Siri \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0441 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.  \u0418 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435 - \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430 - \u0442\u0435\u043f\u0435\u0440\u044c iOS 14 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0441\u043f\u0438\u0441\u043a\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u0442\u0435\u0447\u0435\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e Apple, \"\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u044b\", \u0432\u0438\u0434\u0438\u043c\u043e \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0445\u0435\u0448\u0438. \u041f\u0440\u0438 \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043e\u043a \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0431\u0443\u0434\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0441\u0442\u044c.", "url": "https://t.me/true_secator/952"}, {"timestamp": "2020-09-18T17:15:27Z", "date_only": false, "value": "2020-09-18T17:15:27", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-09-18T19:11:15Z", "date_only": false, "value": "2020-09-18T19:11:15", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_release_date.data.3.date"}, {"timestamp": "2020-10-16T00:00:00Z", "date_only": false, "value": "2020-10-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-10-16T16:56:27Z", "date_only": false, "value": "2020-10-16T16:56:27.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-9992", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-10-16T17:15:00Z", "date_only": false, "value": "2020-10-16T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XVPF-R299-6M5Q", "record": "GHSA-XVPF-R299-6M5Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-10-16T17:15:00Z", "date_only": false, "value": "2020-10-16T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-9992", "record": "GSD-2020-9992", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-10-16T17:15:18.433Z", "date_only": false, "value": "2020-10-16T17:15:18.433000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_release_date.data.6.date"}, {"timestamp": "2020-10-16T17:15:18.433Z", "date_only": false, "value": "2020-10-16T17:15:18.433", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-9992", "record": "FKIE_CVE-2020-9992", "field": "published"}, {"timestamp": "2020-10-21T00:00:00Z", "date_only": true, "value": "2020-10-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-59479", "record": "CNVD-2020-59479", "field": "submitTime"}, {"timestamp": "2020-10-30T00:00:00Z", "date_only": true, "value": "2020-10-30", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-59479", "record": "CNVD-2020-59479", "field": "openTime"}, {"timestamp": "2020-11-15T19:06:24Z", "date_only": false, "value": "2020-11-15T19:06:24.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2020-9992", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-11-27T05:17:07Z", "date_only": false, "value": "2020-11-27T05:17:07", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_update_date.data.2.date"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_update_date.data.3.date"}, {"timestamp": "2022-05-24T17:31:11Z", "date_only": false, "value": "2022-05-24T17:31:11Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XVPF-R299-6M5Q", "record": "GHSA-XVPF-R299-6M5Q", "field": "published"}, {"timestamp": "2022-05-25T00:00:39Z", "date_only": false, "value": "2022-05-25T00:00:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XVPF-R299-6M5Q", "record": "GHSA-XVPF-R299-6M5Q", "field": "modified"}, {"timestamp": "2022-08-04T16:58:09Z", "date_only": false, "value": "2022-08-04T16:58:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sxcteam/152", "record": "CVE-2020-9992", "field": "creation_timestamp", "uuid": "d43e78a7-c341-427e-b25b-9b681febd501", "content": "Apple High Severity Bug Allows Attackers to Execute Arbitrary Code on iPhone, iPad, iPod.\n\nApple release updates for iOS and iPadOS operating systems that fixes several security iPhone, iPad, and iPod devices.\n\nWith the security update, Apple addressed 11 bugs in various products and components such as AppleAVD, Apple Keyboard, WebKit, and Siri.\n\nAmong the fixed vulnerabilities the high severity one is CVE-2020-9992, which allows attackers to execute arbitrary code on the system.\n\nhahahah there's a security flaw on Apple's website", "url": "https://t.me/sxcteam/152"}, {"timestamp": "2022-09-08T16:14:37Z", "date_only": false, "value": "2022-09-08T16:14:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1887", "record": "CVE-2020-9992", "field": "creation_timestamp", "uuid": "259e32ba-4934-4a63-a033-58afe3844fda", "content": "#exploit\nCVE-2020-9992:\nA design flaw in MobileDevice.framework/Xcode and iOS/iPadOS/tvOS Development Tools allows an attacker in the same network to gain remote code execution on a target device\nhttps://blog.zimperium.com/c0ntextomy-lets-debug-together-cve-2020-9992\n]-> PoC:\nhttps://github.com/c0ntextomy/c0ntextomy", "url": "https://t.me/CyberSecurityTechnologies/1887"}, {"timestamp": "2023-01-09T00:00:00Z", "date_only": false, "value": "2023-01-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-01-09T16:41:00Z", "date_only": false, "value": "2023-01-09T16:41Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-9992", "record": "GSD-2020-9992", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:21:53.202Z", "date_only": false, "value": "2023-12-13T01:21:53.202530Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-9992", "record": "GSD-2020-9992", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T10:50:57.526Z", "date_only": false, "value": "2024-08-04T10:50:57.526Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-9992", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T10:50:57.526Z", "date_only": false, "value": "2024-08-04T10:50:57.526Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-9992", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-21T05:41:39.540Z", "date_only": false, "value": "2024-11-21T05:41:39.540000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "sources_update_date.data.4.date"}, {"timestamp": "2024-11-23T20:22:34.130Z", "date_only": false, "value": "2024-11-23T20:22:34.130000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202010-1499", "record": "VAR-202010-1499", "field": "last_update_date"}, {"timestamp": "2026-06-17T03:28:56.393Z", "date_only": false, "value": "2026-06-17T03:28:56.393", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-9992", "record": "FKIE_CVE-2020-9992", "field": "lastModified"}, {"timestamp": "2026-07-12T22:00:17.089Z", "date_only": false, "value": "2026-07-12T22:00:17.089249Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/7563", "record": "CVE-2020-9992", "field": "creation_timestamp", "uuid": "9d502560-4dc7-47d1-84f5-eb5326e9b913", "url": "https://t.me/pleyades_it/7563"}, {"timestamp": "2026-07-13T00:00:40.957Z", "date_only": false, "value": "2026-07-13T00:00:40.957615Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/7563", "record": "CVE-2020-9992", "field": "creation_timestamp", "uuid": "8bc4c82d-73a7-4f16-aa29-d1fabdde51c9", "url": "https://t.me/pleyades_it/7563"}, {"timestamp": "2026-07-14T00:00:51.200Z", "date_only": false, "value": "2026-07-14T00:00:51.200355Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/7563", "record": "CVE-2020-9992", "field": "creation_timestamp", "uuid": "fe680168-ef3d-4e6b-8168-afa1e6e3c415", "url": "https://t.me/pleyades_it/7563"}]}