Apple CoreText Security Vulnerability

Apple CoreText is a core component of Apple Inc. that is used for drawing text drawings in mobile devices. A security vulnerability exists in Apple CoreText, where processing of maliciously crafted font files may result in arbitrary code execution. The following products and versions are affected...

Apple ImageIO Buffer Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO, where processing of maliciously crafted images may result in arbitrary code execution. The following products and versions are affected:...

About the security content of Safari 14.0.2

About the security content of Safari 14.0.2 This document describes the security content of Safari 14.0.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2020-27950

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...

Type confusion

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplement...

Memory corruption

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...

CVE-2020-9981

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave...

CVE-2020-9922

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously crafted email may lead to writing arbitrary files...

Design/Logic Flaw

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave...

Design/Logic Flaw

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra, tvOS 14.0. An application may be able to execute...

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted USD file may lead to unexpected application terminati...

CVE-2020-10011

CVE-2020-10011: An out-of-bounds read vulnerability was fixed by improved bounds checking when processing a maliciously crafted USD file. Affected platforms include iOS 14.2, iPadOS 14.2, macOS Catalina 10.15.7, and Security Update 2020-005 for High Sierra and Mojave. Exploitation could lead to u...

CVE-2020-10011

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted USD file may lead to unexpected application terminati...

CVE-2020-9949

CVE-2020-9949 is a use-after-free vulnerability reported by Apple, affecting CoreCapture and related macOS/iOS/watchOS components. It could allow arbitrary code execution with kernel/system privileges. Apple patched this in macOS Big Sur 11.0.1, macOS Catalina 10.15.6 (and Security Update 2020-00...

CVE-2020-9922

CVE-2020-9922 affects Apple Mail in macOS and is caused by a logic/state-management issue that enables arbitrary file writes via specially crafted emails. The vulnerability can be triggered by processing certain ZIP-attachments with x-mac-auto-archive headers and leftover symlinks in temporary di...

CVE-2020-27950

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...

Multiple Apple Product Licensing Issues Vulnerabilities

Apple macOS Mojave and others are a set of specialized operating systems developed for Mac computers by the American company Apple. A security vulnerability exists in several Apple versions, which stems from the handling of malicious emails that could lead to the writing of arbitrary files. The...

macOS 10.13.x < 10.13.6 Security Update 2020-006 / 10.14.x < 10.14.6 Security Update 2020-006 (HT211946)

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-006 High Sierra, or 10.14.x prior to 10.14.6 Security Update 2020-006 Mojave. It is, therefore, affected by multiple vulnerabilities : - Processing a maliciously crafted font may lead to...

Buffer Overflow Vulnerability in Various Apple Products

Apple macOS Mojave is a product of Apple Inc. Apple macOS Mojave is a specialized operating system for Mac computers. apple macOS High is a specialized operating system for Mac computers. apple macOS High Sierra is a specialized operating system for Mac computers. apple macOS High Sierra is a...

Multiple Apple Products Input Validation Error Vulnerability

Apple macOS Mojave is a product of Apple Inc. Apple macOS Mojave is a specialized operating system for Mac computers. apple macOS High is a specialized operating system for Mac computers. apple macOS High Sierra is a specialized operating system for Mac computers. apple macOS High Sierra is a...