CVE-2020-9969

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A local user may be able to view senstive user information...

CVE-2020-9981

CVE-2020-9981 is a use-after-free vulnerability in Apple platforms, with specifics shown across connected docs: Apple’s watchOS 7.0, iOS 14.0 / iPadOS 14.0, tvOS 14.0, macOS Catalina 10.15.7, and related security updates address the issue by improving memory management. The vulnerability is descr...

CVE-2020-9981

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave...

CVE-2020-9949

CVE-2020-9949 is a use-after-free vulnerability reported by Apple, affecting CoreCapture and related macOS/iOS/watchOS components. It could allow arbitrary code execution with kernel/system privileges. Apple patched this in macOS Big Sur 11.0.1, macOS Catalina 10.15.6 (and Security Update 2020-00...

CVE-2020-9943

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A malicious application may be able to read restricted memory...

CVE-2020-9943

CVE-2020-9943 is an out-of-bounds read in Apple’s Audio stack (CoreAudio) that could allow a malicious app to read restricted memory. It was addressed by improved bounds checking and memory handling. The fixed versions include macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0, watchOS 7.0, and tvOS ...

CVE-2020-9947

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2020-9947

CVE-2020-9947 is a use-after-free vulnerability in memory management related to WebKit/Safari on Apple platforms. The advisory states that processing malicious web content may lead to arbitrary code execution. Fixed in watchOS 7.0, iOS 14.0 / iPadOS 14.0, tvOS 14.0, Safari 14.0, and corresponding...

CVE-2020-9947

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2020-9966

CVE-2020-9966 is an out-of-bounds read issue that Apple fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0, and iPadOS 14.0. The underlying vulnerability stemmed from improper input validation, and Apple notes that an application may be able to execute arbitrary code with kernel priv...

CVE-2020-9966

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9950

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, tvOS 14.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2020-9950

CVE-2020-9950: A use-after-free issue addressed in WebKit that affects Apple platforms. According to the initial record, the vulnerability could be triggered by processing malicious web content and may lead to arbitrary code execution. Affected products/contexts include watchOS 7.0, tvOS 14.0, Sa...

CVE-2020-9954

CVE-2020-9954 affects Apple media components across iOS/iPadOS 14, watchOS 7.0, tvOS 14 and macOS Catalina 10.15.7. The root cause is a buffer/memory handling issue in CoreAudio: Playing a malicious audio file may lead to arbitrary code execution. The vulnerability is addressed by updates on the ...

CVE-2020-9849

CVE-2020-9849 affects Apple platforms including macOS Big Sur 11.0.1, iOS/iPadOS 14.0, watchOS 7.0, tvOS 14.0, and related Windows components. The issue is described as an information disclosure due to improved state management that may allow memory leakage. Remediation is to update to the listed...

CVE-2020-9849

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0. A remote attacker may be able to leak memory...

CVE-2020-9944

CVE-2020-9944: An out-of-bounds read in certain Apple media components was addressed by improved bounds checking. Affected: macOS Big Sur 11.0.1 and prior; affected watchOS 7.0, tvOS 14.0, iOS 14.0, and iPadOS 14.0. Impact (as stated): an application may be able to read restricted memory. Public ...

CVE-2020-9944

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to read restricted memory...

CVE-2020-9952

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack...

CVE-2020-9952

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack...