VulnCheck KEV: CVE-2020-27950

Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory...

CVE-2019-8851

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. A Mac may not lock immediately upon wake...

CVE-2019-8809

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6, iOS 13. A local app may be able to read a persistent account identifier...

ALPINE-CVE-2019-8696

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

PT-2020-11201 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.4 Security Update versions prior to 2019-002 High Sierra Security Update versions prior to 2019-002 Sierra Description: A validation issue existed in the handling of symlinks, which was addressed with improved...

CVE-2020-9902

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to determine kernel memory layout...

PT-2020-20851 · Apple · Macos Catalina +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Description: The issue is related to an out-of-bounds read that has been addressed...

Foxit Reader and PhantomPDF Code Injection Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code injection vulnerability exists in Foxit Reader and PhantomPDF versions prior to 4.1 on macOS. The vulnerability stems from external input data to construct code segments in the process, the networ...

CVE-2020-9799

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges...

chromium-browser: Insufficient data validation in dialogs

Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...

CVE-2020-24559

A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as roo...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2020-52166)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Windows and macOS platform based on Adobe Acrobat and Reader security vulnerabilities exist. Attacke...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2020-52168)

Adobe Acrobat and Reader are the United States of America Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Windows and macOS platform based on Adobe Acrobat and Reader security vulnerabilities...

PT-2020-3584 · Apple · Macos Catalina +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 Description: An issue existed in the handling of environment variables, which has been addressed with improved validation. This issue may allow ...

Vulnerabilities fixed in Apple macOS

Apple has fixed several vulnerabilities in Mac OS. A malicious party can exploit the vulnerabilities to launch attacks that lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root privileges Access to sensitive data -= Apple =- Apple has made...

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabilities could...

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabiliti...

CVE-2020-9825

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A malicious application may be able to bypass Privacy preferences...

CVE-2020-9817

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges...

PT-2020-20795 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 tvOS versions prior to 13.4.5 Description: The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. ...