CVE-2020-3888

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4. A maliciously crafted page may interfere with other web contexts...

CVE-2020-3888

CVE-2020-3888 affects Apple’s Web App component (iOS/iPadOS Safari/WebKit). Description: a logic issue where a malicious page could interfere with other web contexts. Root cause: improved restrictions address the logic issue. Impact: potential interference with other web contexts within Web App/W...

CVE-2020-3889

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to read arbitrary files...

CVE-2020-3881

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to view sensitive user information...

CVE-2020-3881

CVE-2020-3881 is a logic issue in the FaceTime component of macOS Catalina that was addressed by improved state management. The vulnerability could allow a local user to view sensitive user information. Apple’s security content notes the fix is included in macOS Catalina 10.15.4. Other connected ...

CVE-2020-3891: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled...

CVE-2020-3881: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to view sensitive user information...

CVE-2020-9784: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings...

CVE-2020-3906: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.4. A maliciously crafted application may be able to bypass code signing enforcement...

PT-2020-17779

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.4 iPadOS versions prior to 13.4 watchOS versions prior to 6.2 Description A logic issue was addressed with improved state management, allowing a person with physical access to a locked iOS device to potentially respond...

PT-2020-17772

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description A logic issue was addressed with improved state management, which could allow a local user to view sensitive user information. Recommendations For versions prior to 10.15.4, update to macOS Catalina...

PT-2020-17776

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.4 iPadOS versions prior to 13.4 Description A logic issue was addressed with improved restrictions. A maliciously crafted page may interfere with other web contexts. Recommendations For iOS versions prior to 13.4, upda...

PT-2020-20746

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.4 iPadOS versions prior to 13.4 Description A logic issue was addressed with improved state management, allowing an attacker in a privileged network position to potentially intercept Bluetooth traffic. Recommendations...

PT-2020-20758

Name of the Vulnerable Software and Affected Versions Safari versions prior to 13.1 Description A logic issue was addressed with improved restrictions. A malicious iframe may use another website's download settings. Recommendations For versions prior to 13.1, update to Safari 13.1 to resolve the...

CVE-2020-3887: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A download's origin may be incorrectly associated...

PT-2020-17777

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description A logic issue was addressed with improved state management, allowing a local user to potentially read arbitrary files. Recommendations For versions prior to 10.15.4, update to macOS Catalina 10.15.4 ...

CVE-2020-9770: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic...

PT-2020-17786

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description A logic issue was addressed with improved restrictions. A maliciously crafted application may be able to bypass code signing enforcement. Recommendations For versions prior to 10.15.4, update to macO...

CVE-2020-3888: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4. A maliciously crafted page may interfere with other web contexts...

Apple Mac OS X Security Update (HT211100)-03

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...