PT-2020-20797 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.15.5 iOS versions prior to 13.5 iPadOS versions prior to 13.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Description: A race condition was addressed with improved state handling, which may allow a...

Multiple Apple Products WebKit Component Memory Corruption Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A memory corruption vulnerability exists in the WebKit component of several Apple...

Unspecified Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2020-52151)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products,...

Apple macOS Catalina, iOS and iPadOS AirDrop Component Denial of Service Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.AirDrop AirDrop is one of the wireless file transfer components. A security vulnerability exists in...

PT-2020-6115 · Apple · Itunes For Windows +7

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 13.5 Apple iPadOS versions prior to 13.5 Apple macOS Catalina versions prior to 10.15.5 Apple tvOS versions prior to 13.4.5 Apple watchOS versions prior to 6.2.5 Apple iTunes for Windows versions prior to 12.10.7...

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25589)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

VulnCheck KEV: CVE-2020-9819

Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message...

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service allows a hacker to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a...

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service is related to buffer overflows in memory. This allows attackers to execute a type of “cross-site scripting” attack.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service is related to buffer overflow in memory. Exploiting this vulnerability allows a malicious actor to carry out a “cross-sit...

The vulnerability of the rendering module in WebKit operating systems such as openSUSE Leap, Mac OS X, iOS, tvOS, and the Safari browser lies in the use of memory after it is released. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

The vulnerability of the rendering module in WebKit operating systems such as openSUSE Leap, Mac OS X, iOS, tvOS, and the Safari browser lies in the use of memory after it is freed. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

Multiple Apple Products ActionKit Component Authorization Issue Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. actionKit is a wrapper component for the target action paradigm. A security vulnerability exists in the ActionKit component of...

Unspecified Vulnerability in Messages Component of Multiple Apple Products

Apple iOS and others are products of Apple Inc.Apple iOS is a set of operating systems developed for mobile devices.Apple watchOS is a set of operating systems for smartwatches.Apple iPadOS is a set of operating systems for iPad tablets.Messages is one of the application components used to send...

Apple iOS and Apple macOS Mojave Feedback Assistant Component Competition Condition Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple macOS Mojave is a specialized operating system for Mac computers. feedback Assistant is one of the Feedback Assistant is one of the system error feedback components. A...

Apple Shortcuts for iOS Sandbox Restriction Bypass Vulnerability

Apple Shortcuts for iOS is a set of shortcut applications from Apple USA based on the iOS platform. A security vulnerability exists in Apple Shortcuts for iOS prior to version 2.1.3. A local attacker can exploit the vulnerability to bypass sandbox restrictions...

Multiple Apple Products TrueTypeScaler Component Out-of-Bounds Read Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. trueTypeScaler is a font file processing component of the... TrueTypeScaler is a font file processing...

CVE-2019-8798

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8529

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. An application may be able to execute arbitrary code with kernel privileges...

PT-2019-19095 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.2 macOS Mojave versions prior to 10.14.4 Description: A race condition was addressed with additional validation. A malicious application may be able to gain root privileges. Recommendations: For iOS versions prior to...

Apple tvOS, Apple iOS, and Apple iPadOS UIFoundation Component Buffer Overflow Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. ufoundation is one of the UI framework components. A buffer overflow vulnerability exists in the UIFoundation component in Apple tv...