Apple macOS elevation of privilege vulnerability (CNVD-2020-70954)

Apple macOS is a specialized operating system developed by Apple for Mac computers. An elevation of privilege vulnerability exists in Apple macOS version 6.0.2. The vulnerability stems from a flaw in the XPC interface in AnyDesk on macOS versions 6.0.2 and above, which fails to properly validate ...

Unspecified Vulnerability in Various Apple Products (CNVD-2020-67612)

Apple Safari is a product of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. tvOS is a smart TV operating system...

PT-2020-6111 · Apple · Icloud For Windows +8

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 iCloud for Windows versions prior to 11.5 tvOS versions prior to 14.2 iTunes for Windows versions prior to 12.11 Description...

PT-2020-20923 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.0 iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description: The issue was addressed with improved deletion. A local user may be able to discover a user’s deleted messages...

PT-2020-16846 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.1 Security Update versions prior to 2020-001 Catalina Security Update versions prior to 2020-007 Mojave macOS Big Sur version 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 watchOS versions prior to...

VulnCheck KEV: CVE-2020-27950

Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory...

CVE-2019-8851

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. A Mac may not lock immediately upon wake...

CVE-2019-8809

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6, iOS 13. A local app may be able to read a persistent account identifier...

ALPINE-CVE-2019-8696

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

PT-2020-11201 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.4 Security Update versions prior to 2019-002 High Sierra Security Update versions prior to 2019-002 Sierra Description: A validation issue existed in the handling of symlinks, which was addressed with improved...

PT-2020-20851 · Apple · Macos Catalina +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Description: The issue is related to an out-of-bounds read that has been addressed...

Foxit Reader and PhantomPDF Code Injection Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code injection vulnerability exists in Foxit Reader and PhantomPDF versions prior to 4.1 on macOS. The vulnerability stems from external input data to construct code segments in the process, the networ...

CVE-2020-9799

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges...

chromium-browser: Insufficient data validation in dialogs

Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...

CVE-2020-24559

A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as roo...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2020-52166)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Windows and macOS platform based on Adobe Acrobat and Reader security vulnerabilities exist. Attacke...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2020-52168)

Adobe Acrobat and Reader are the United States of America Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Windows and macOS platform based on Adobe Acrobat and Reader security vulnerabilities...

PT-2020-3584 · Apple · Macos Catalina +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 Description: An issue existed in the handling of environment variables, which has been addressed with improved validation. This issue may allow ...

Vulnerabilities fixed in Apple macOS

Apple has fixed several vulnerabilities in Mac OS. A malicious party can exploit the vulnerabilities to launch attacks that lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root privileges Access to sensitive data -= Apple =- Apple has made...

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabilities could...