1207 matches found
CVE-2020-9795
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to execute arbitrary code with kernel privileges...
PT-2020-20796 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 Description: The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. A remote attacker may be able to cause arbitrary code execution...
PT-2020-20805 · Apple · Macos Catalina +4
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Description: The issue is related to an integer overflow that has been addressed...
Foxit Reader and PhantomPDF Data Forgery Issue Vulnerability
Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to bypass signature verification through modified files or files with...
Apple macOS Catalina Wi-Fi component memory corruption vulnerability (CNVD-2020-32218)
Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers.Wi-Fi is one of the wireless Internet components. A memory corruption vulnerability exists in the Wi-Fi component of Apple macOS Catalina versions prior to 10.15.5, which can be exploited by an attack...
Apple macOS Catalina Security Component Input Validation Error Vulnerability
Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. A security vulnerability exists in the Security component of Apple macOS Catalina versions prior to 10.15.5. An attacker can exploit the...
Denial of Service Vulnerability in Accounts Component of Multiple Apple Products
Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers. Accounts is one of the user account components. A...
PT-2020-6102 · Apple · Itunes For Windows +7
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 13.5 Apple iPadOS versions prior to 13.5 Apple macOS Catalina versions prior to 10.15.5 Apple tvOS versions prior to 13.4.5 Apple watchOS versions prior to 6.2.5 Apple iTunes for Windows versions prior to 12.10.7...
The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious...
Apple macOS Catalina CoreBluetooth component buffer overflow vulnerability (CNVD-2020-29869)
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A buffer overflow vulnerability exists in the CoreBluetooth component in Apple macOS Catalina versions prior to 10.15.3. A remote attacker could exploit this vulnerability to cause an application to...
CVE-2020-9776
This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history...
CVE-2020-3873
This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Turning off "Load remote content in messages” may not apply to all mail previews...
CVE-2020-3871
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code with kernel privileges...
CVE-2020-3875
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory...
CVE-2020-3836
An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to determine kernel memory layout...
CVE-2020-3828
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...
CVE-2020-3840
An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1. Loading a maliciously crafted racoon configuration file may lead to...
CVE-2020-3837
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges...
Apple macOS Catalina Crash Reporter Component Input Validation Vulnerability
Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers.Crash Reporter is one of the error reporting components. A security vulnerability exists in the Crash Reporter component in Apple macOS Catalina versions prior to 10.15.3. The vulnerability can be exploite...
