{"api_version":"1","generated_at":"2026-07-23T14:27:07+00:00","cve":"CVE-2020-9858","urls":{"html":"https://cve.report/CVE-2020-9858","api":"https://cve.report/api/cve/CVE-2020-9858.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-9858","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-9858"},"summary":{"title":"CVE-2020-9858","description":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.","state":"PUBLIC","assigner":"product-security@apple.com","published_at":"2020-06-09 17:15:00","updated_at":"2020-06-15 18:18:00"},"problem_types":["CWE-427"],"metrics":[],"references":[{"url":"https://support.apple.com/HT211186","name":"https://support.apple.com/HT211186","refsource":"MISC","tags":["Vendor Advisory"],"title":"About the security content of Windows Migration Assistant 2.2.0.0 - Apple Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9858","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9858","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"9858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"windows_migration_assistant","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"9858","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"windows_migration_assistant","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2020-9858","ASSIGNER":"product-security@apple.com","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Apple","product":{"product_data":[{"product_name":"Windows Migration Assistant","version":{"version_data":[{"version_affected":"<","version_value":"Windows Migration Assistant 2.2.0.0 (v. 1A11)"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Running the installer in an untrusted directory may result in arbitrary code execution"}]}]},"references":{"reference_data":[{"url":"https://support.apple.com/HT211186","refsource":"MISC","name":"https://support.apple.com/HT211186"}]},"description":{"description_data":[{"lang":"eng","value":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution."}]}},"nvd":{"publishedDate":"2020-06-09 17:15:00","lastModifiedDate":"2020-06-15 18:18:00","problem_types":["CWE-427"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"severity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:apple:windows_migration_assistant:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.0.0","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"9858","Ordinal":"170254","Title":"CVE-2020-9858","CVE":"CVE-2020-9858","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"9858","Ordinal":"1","NoteData":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"9858","Ordinal":"2","NoteData":"2020-06-09","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"9858","Ordinal":"3","NoteData":"2020-10-16","Type":"Other","Title":"Modified"}]}}}