CVE-2020-29639

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2020-29625

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2020-29621

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences...

CVE-2020-27937

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to access private information...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in multiple Apple products that originates from a maliciously crafted image that could lead to arbitrary code execution. The following products and versions are fixed: macOS Big Sur 11.1 Security Updat...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A vulnerability in privilege permission and access control issues exists in Apple macOS Big Sur prior to version 11.0.1, which stems from a native application that can enumerate a user's iCloud documents...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system from Apple Inc. that was developed specifically for Mac computers. A security vulnerability exists in Apple macOS that stems from a lack of proper validation of user-supplied data, which could result in reading more than the end of an allocated data...

Apple CoreText Buffer Error Vulnerability

Apple CoreText is a core component from Apple Inc. that is used in mobile devices for drawing text drawings. Apple CoreText suffers from a buffer error vulnerability that exists as a result of an application failing a boundary condition within the CoreText component in macOS. A remote attacker...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. An arbitrary file read vulnerability exists in Apple macOS, which arises from an application not properly applying security restrictions within the APFS component of macOS. A local user can read arbitrary files on...

Apple iOS iPadOS Security Vulnerability

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple iOS 14.4 and iPadOS 14.4 have a security vulnerability that originates from a boundary error when processing image files...

Apple FontParser Buffer Error Vulnerability

Apple FontParser is a font parsing program from Apple Inc. A security vulnerability exists in Apple FontParser that stems from a boundary condition when processing font files within the FontParser component in macOS. A remote attacker can create a specially crafted file, trick a victim into openi...

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from insufficient validation of user-supplied input when processing font files in the FontParser component of macOS. A remote attacker could trick a...

Apple macOS Buffer Error Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that originates from a boundary condition when handling USB files in the Model I / O component of macOS. A local user can insert a specially crafted USB drive to...

Apple Model I/O Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. A security vulnerability exists in Apple Model I/O. The vulnerability stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigg...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed a large number of vulnerabilities in Apple iOS and iPadOS 14.4. A malicious party can exploit the vulnerabilities to cause the following types of damage: Denial-of-Service DoS. Remote code execution User rights Access to sensitive data -= Apple =- Apple has made updates available ...

VulnCheck KEV: CVE-2021-1871

Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.0.1 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution...

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS where a malicious application may be able to execute arbitrary code with system privileges. The following products and versions are affected: macOS Mojave 10.14....

Apple macOS Resource Management Error Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that can be exploited by local attackers to escalate their privileges. The following products and versions are affected: Mac Pro 2013 and newer, MacBook Air 2013...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS has a security vulnerability that can be exploited by attackers to cause arbitrary code execution...