3017 matches found
CVE-2020-10004
CVE-2020-10004 is a logic-issue vulnerability fixed in Apple OS updates: macOS Big Sur 11.0.1, iOS 14.2, and iPadOS 14.2. The issue arises from improved state management and may allow an attacker to cause an application to terminate unexpectedly or execute arbitrary code when a maliciously crafte...
CVE-2020-10013
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges...
CVE-2020-10013
CVE-2020-10013 is a kernel-privilege escalation tied to a logic issue addressed by Apple in tvOS 14.0, iOS 14.0 and iPadOS 14.0. The issue is described as a logic/state-management defect that could allow an application to execute arbitrary code with kernel privileges. Apple’s advisories (HT211843...
CVE-2020-10009
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions...
CVE-2020-10009
CVE-2020-10009 is a macOS Big Sur issue described as a logic problem addressed by improved state management. The fixed version is macOS Big Sur 11.0.1, and the vulnerability could allow a sandboxed process to circumvent sandbox restrictions. The Red Hat/Apple entries corroborate the same descript...
CVE-2020-9974
CVE-2020-9974 is a kernel-level logic issue in the XNU kernel that could allow a malicious app to determine kernel memory layout. Apple fixed it by improved state management, with patches in macOS Big Sur 11.0.1 and iOS/iPadOS 14.2 (as well as tvOS/watchOS updates per HT211930/HT211929).
CVE-2020-9974
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to determine kernel memory layout...
CVE-2020-10002
CVE-2020-10002 is a local-privilege issue described as a logic issue that was fixed by improved state management. Affected software includes macOS Big Sur 11.0.1 and other Apple platforms updated with 14.2 or later, notably iOS 14.2, iPadOS 14.2, watchOS 7.1, tvOS 14.2, iCloud for Windows 11.5, a...
CVE-2020-10002
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A local user may be able to read arbitrary files...
CVE-2020-9922
A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously crafted email may lead to writing arbitrary files...
About the security content of iCloud for Windows 11.5
About the security content of iCloud for Windows 11.5 This document describes the security content of iCloud for Windows 11.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
ASB-A-168500792
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation...
EDK II Elevation of Privilege Vulnerability
EDK II is a modern, feature-rich cross-platform firmware development environment for UEFI and the UEFI Platform Initialization PI specification. An elevation of privilege vulnerability exists in EDK II that stems from a logic issue in EDK II's DxeImageVerificationHandler, which can be exploited b...
CVE-2019-14587
Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2019-14587
Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2019-14575
Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Logic issue in DxeImageVerificationHandler for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-14587
Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2019-14587
CVE-2019-14587 is a logic issue in EDK II (firmware) that may allow an unauthenticated user to cause a denial of service via adjacent access. The connected sources (EulerOS/E DK2 advisories and NVD listing) confirm the vulnerability is associated with EDK II and is cataloged as CVE-2019-14587, wi...
