CVE-2020-29623

CVE-2020-29623 affects WebKitGTK/WebKit2GTK. The issue: the “Clear History and Website Data” function could fail to fully delete browsing history. Affected products include WebKitGTK-based stacks; upstream fixes exist and are reflected in package updates (e.g., Debian security advisory DSA-4877-1...

CVE-2020-29623

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete...

CVE-2020-29619

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may...

CVE-2020-29621

CVE-2020-29621 is an Apple macOS vulnerability reported across multiple sources. It affects the AppleMobileFileIntegrity component and allowed a malicious application to bypass Privacy preferences. Apple’s security updates fixed the issue in macOS Big Sur 11.1 and in Security Update 2020-001 Cata...

CVE-2020-29617

CVE-2020-29617 relates to an out-of-bounds read in ImageIO processing that could lead to heap corruption when handling maliciously crafted images. Affected software versions include tvOS 14.3; macOS Big Sur 11.1; Security Update 2020-001 Catalina and 2020-007 Mojave; iOS 14.3 and iPadOS 14.3; iCl...

CVE-2020-29620

CVE-2020-29620 affects macOS and relates to privilege escalation via entitlements. The issue is described as being addressed with improved entitlements and fixed in macOS Big Sur 11.1, Catalina Security Update 2020-001, and Mojave Security Update 2020-007. The Apple advisory HT212011 corroborates...

CVE-2020-29620

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges...

CVE-2020-29615

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted image may lead to a denial of servi...

CVE-2020-29614

CVE-2020-29614 affects Apple platforms and is described as a heap corruption issue triggered by processing a maliciously crafted file. The description lists affected releases and a fixed status: macOS Big Sur 11.2; Security Update 2021-001 Catalina and Mojave; macOS Big Sur 11.1; Security Update ...

CVE-2020-29610

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may disclose restricted...

CVE-2020-27949

CVE-2020-27949 involves a memory-access vulnerability in macOS DTrace probes via /dev/fasttrap that allowed a non-privileged process to read (and potentially write) memory of other processes traced under DTrace. The PoC exploit demonstrates creating probes in victim processes and replacing memory...

CVE-2020-27952

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. Processing a maliciously crafted font file may lead to arbitrary code execution...

CVE-2020-27947

CVE-2020-27947 affects macOS: memory corruption resolved by input validation fixes. Affected in macOS Big Sur 11.1, Security Update 2020-001 Catalina, and Security Update 2020-007 Mojave. Impact: an attacker may be able to execute arbitrary code with kernel privileges via a local vector. Remediat...

CVE-2020-27947

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-27944

The CVE-2020-27944 entry concerns a memory corruption vulnerability in FontParser when processing maliciously crafted font files. Apple security disclosures (HT212003/HT212005/HT212009) indicate the issue could allow arbitrary code execution and is addressed by updates in watchOS 7.2, macOS Big S...

CVE-2020-27945

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.0.1. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2020-27938

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to...

CVE-2020-27938

CVE-2020-27938 is a logic/state-management issue in macOS components that could allow a malicious app to elevate privileges. It is fixed by Apple in macOS Big Sur 11.2 and Security Updates 2020-001 Catalina, 2020-007 Mojave, 2021-001 Catalina, and 2021-001 Mojave, plus macOS Big Sur 11.1. There i...

CVE-2020-27941

CVE-2020-27941 concerns a validation issue in AppleGraphicsControl that could allow an application to execute arbitrary code with kernel privileges. The Apple security content notes the fix in macOS Big Sur 11.1 and Security Updates 2020-001 Catalina / 2020-007 Mojave, indicating these updates ad...

CVE-2020-27939

CVE-2020-27939 affects macOS ImageIO in supported Apple OS releases. A memory corruption issue in processing a maliciously crafted image was addressed by Apple with improved input validation, and is fixed in macOS Big Sur 11.1 as well as Security Update 2020-001 Catalina and Security Update 2020-...