{"id":"CVE-2020-9858","aliases":["EUVD-2020-30637","GHSA-8v24-3r89-xw58"],"status":"published","title":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed...","description":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00489,"percentile":0.42391,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-427"],"published":"2020-06-09T16:18:12Z","modified":"2026-06-17T03:28:41Z","products":[{"vendor":"apple","product":"windows migration assistant"},{"vendor":"apple","product":"windows_migration_assistant"}],"references":[{"url":"https://support.apple.com/HT211186","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9858"},{"url":"https://github.com/advisories/GHSA-8v24-3r89-xw58"}],"sources":{"cve":[{"id":"CVE-2020-9858","description":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.","status":"published","published":"2020-06-09T16:18:12Z","modified":"2024-08-04T10:43:05.446Z","updated_at":"2026-11-02T14:35:49.538427Z"}],"euvd":[{"id":"EUVD-2020-30637","description":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.","status":"published","published":"2020-06-09T16:18:12Z","modified":"2024-08-04T10:43:05Z","updated_at":"2026-11-03T03:07:52.605769Z"}],"ghsa":[{"id":"GHSA-8v24-3r89-xw58","title":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed...","description":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.","status":"published","published":"2022-05-24T17:19:46Z","modified":"2023-01-29T05:02:53Z","updated_at":"2026-11-02T14:45:11.402148Z"}],"nvd":[{"id":"CVE-2020-9858","description":"A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.","status":"published","published":"2020-06-09T17:15:15.487Z","modified":"2026-06-17T03:28:41.687Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:06:05.962132Z"}]}}
