VULNERABILITY INTELLIGENCE
CVE-2020-9858
CVSS score7.8 HIGH
EPSS probability0.49%
CISA KEVNot currently listed
Published2020-06-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.
Weakness classification
- nvd@nist.gov: CWE-427
Primary references
- product-security@apple.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory