Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabiliti...

CVE-2020-9825

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A malicious application may be able to bypass Privacy preferences...

PT-2020-20795 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 tvOS versions prior to 13.4.5 Description: The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. ...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-32321)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 83.0.4103.97 MacOS. A remote attacker can exploit this vulnerability with specially crafted HTML to cause a sandbox escape...

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the iCloud service for Windows operating systems, related to the execution of operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for operating systems Windows, and the iCloud service for operating systems Windows are related to the execution of operations outside of the buffer in memory. Exploitation of...

PT-2020-20797 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.15.5 iOS versions prior to 13.5 iPadOS versions prior to 13.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Description: A race condition was addressed with improved state handling, which may allow a...

ImageIO Component Buffer Overflow Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.ImageIO ImageIO is a component that reads and writes image data. A buffer overflow vulnerability...

Security Bypass Vulnerability in Multiple Adobe Products (CNVD-2020-41475)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Windows and macOS-based platforms, Adobe Acrobat and Reader security vulnerabilities exist. Attacker...

The vulnerability of the Microsoft RMS Sharing App for Mac operating systems lies in its insecure management of privileges. This allows a malicious user to install programs, view, modify, or delete data with the rights of an authorized user.

The vulnerability of the Microsoft RMS Sharing App for Mac operating systems lies in the insecure management of privileges. Exploiting this vulnerability could allow a malicious individual to install programs, view, modify, or delete data with the rights of an authorized user...

Maxum Development Rumpus Path Traversal Vulnerability

Maxum Development Rumpus is a suite of file transfer server software from Maxum Development in the United States. A security vulnerability exists in Maxum Development Rumpus versions prior to 8.2.12 macOS. An attacker can exploit the vulnerability to access arbitrary files on the server...

CVE-2020-12737

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server...

CVE-2020-11581

An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...

Apple macOS Catalina FaceTime Component Logic Issue Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the FaceTime component of Apple macOS Catalina versions prior to 10.15.4. A local attacker can exploit the vulnerability to obtain sensitive user information...

Unspecified Vulnerability in Apple macOS Catalina Call History Component

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Call History is one of the call history components.... A security vulnerability in the Call History component of Apple macOS Catalina prior to version 10.15.4 can be exploited by malicious applications to...

Nextcloud Desktop Client Code Injection Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A code injection vulnerability exists in version 2.6.2 of Nextcloud Desktop Client for macOS-based platforms, which can be exploited by an attacker to load...

Parallels Desktop VGA Virtual Appliance Buffer Overflow Vulnerability

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A buffer overflow vulnerability exists in the VGA virtual appliance in Parallels Desktop, which stems from the program failing to properly validate user-submitted data. An attacker could explo...

Apple macOS Catalina Wi-Fi Component Memory Corruption Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the Wi-Fi component of Apple macOS Catalina versions prior to 10.15.3. A remote attacker could exploit the vulnerability to terminate the system or corrupt kernel...

UBUNTU-CVE-2020-6402

Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

Apple iOS and Apple macOS Mojave Feedback Assistant Component Competition Condition Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple macOS Mojave is a specialized operating system for Mac computers. feedback Assistant is one of the Feedback Assistant is one of the system error feedback components. A...

WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-00486)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer error vulnerability...