CVE-2020-10003

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges...

CVE-2020-10010

CVE-2020-10010 describes a path handling issue that affects macOS and related Apple OS components, with a local attacker able to elevate privileges due to insufficient path validation. The issue is addressed by improved validation in the code paths involved, and is fixed in Apple platforms as fol...

CVE-2020-10010

A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges...

CVE-2020-9989

CVE-2020-9989 is a local information‑disclosure issue in Apple Messages where a local user may discover another user’s deleted messages. The CVE entry is represented in Apple advisories for macOS Big Sur 11.0.1 and relevant iOS/iPadOS/watchOS updates, with the issue described as fixed by improved...

CVE-2020-9989

The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A local user may be able to discover a user’s deleted messages...

CVE-2020-9974

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to determine kernel memory layout...

CVE-2020-9974

CVE-2020-9974 is a kernel-level logic issue in the XNU kernel that could allow a malicious app to determine kernel memory layout. Apple fixed it by improved state management, with patches in macOS Big Sur 11.0.1 and iOS/iPadOS 14.2 (as well as tvOS/watchOS updates per HT211930/HT211929).

CVE-2020-10002

CVE-2020-10002 is a local-privilege issue described as a logic issue that was fixed by improved state management. Affected software includes macOS Big Sur 11.0.1 and other Apple platforms updated with 14.2 or later, notably iOS 14.2, iPadOS 14.2, watchOS 7.1, tvOS 14.2, iCloud for Windows 11.5, a...

CVE-2020-10002

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A local user may be able to read arbitrary files...

CVE-2020-9993

The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-9965

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9965

CVE-2020-9965 is an out-of-bounds read in Disk Images that Apple fixes with improved input validation across macOS Big Sur 11.0.1 and related OS versions (watchOS 7.0, tvOS 14.0, iOS/iPadOS 14.0). The bulletin notes that an affected application may be able to execute arbitrary code with kernel pr...

CVE-2020-9969

CVE-2020-9969 affects macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. Description from Apple Security Advisories shows an access issue that allowed a local user to view sensitive information, addressed by applying additional sandbox restrictions. The remediation is upgradi...

CVE-2020-9969

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A local user may be able to view senstive user information...

CVE-2020-9981

CVE-2020-9981 is a use-after-free vulnerability in Apple platforms, with specifics shown across connected docs: Apple’s watchOS 7.0, iOS 14.0 / iPadOS 14.0, tvOS 14.0, macOS Catalina 10.15.7, and related security updates address the issue by improving memory management. The vulnerability is descr...

CVE-2020-9981

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave...

CVE-2020-9943

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A malicious application may be able to read restricted memory...

CVE-2020-9943

CVE-2020-9943 is an out-of-bounds read in Apple’s Audio stack (CoreAudio) that could allow a malicious app to read restricted memory. It was addressed by improved bounds checking and memory handling. The fixed versions include macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0, watchOS 7.0, and tvOS ...

CVE-2020-9947

CVE-2020-9947 is a use-after-free vulnerability in memory management related to WebKit/Safari on Apple platforms. The advisory states that processing malicious web content may lead to arbitrary code execution. Fixed in watchOS 7.0, iOS 14.0 / iPadOS 14.0, tvOS 14.0, Safari 14.0, and corresponding...

CVE-2020-9947

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution...