CVE-2020-27920

CVE-2020-27920 is a use-after-free vulnerability fixed in Apple platforms. The issue, described as a use-after-free leading to code execution when processing maliciously crafted web content, affects macOS Big Sur (11.0.1 and 11.1), Catalina (Security Update 2020-001) and Mojave (Security Update 2...

CVE-2020-27915

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2020-27893

CVE-2020-27893 affects macOS Big Sur before 11.0.1. The issue is in screen sharing where a user with screen sharing access could view another user’s screen; root cause described as a state-management flaw that was fixed. The publicly stated remediation is to upgrade to macOS Big Sur 11.0.1 (HT211...

CVE-2020-27893

An issue existed in screen sharing. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A user with screen sharing access may be able to view another user's screen...

CVE-2020-9975

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute...

CVE-2020-9978

This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An attacker in a privileged network position may be ab...

CVE-2020-9978

CVE-2020-9978 is an Apple macOS/iOS family issue: a memory/setting-propagation flaw that could allow an attacker in a privileged network position to unexpectedly alter application state. Affected products include macOS Big Sur (11.0.1, 11.1), macOS Catalina (Security Update 2020-001), macOS Mojav...

CVE-2020-10008

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.0.1. A malicious application with root privileges may be able to access private information...

CVE-2020-10008

CVE-2020-10008 is a logic/restrictions issue fixed in macOS Big Sur 11.0.1. The description across Apple and Red Hat sources states that a malicious application with root privileges may access private information, due to a logic issue addressed with improved restrictions and input validation. The...

CVE-2020-9956

CVE-2020-9956 is an out-of-bounds/memory handling issue affecting Apple font parsing components (FontParser/CoreText) where processing a maliciously crafted font file could lead to arbitrary code execution. The vulnerability is addressed in Apple security updates for macOS Big Sur 11.0.1, macOS B...

CVE-2020-9956

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font file may...

CVE-2020-9971

A logic issue was addressed with improved validation. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. A malicious application may be able to elevate privileges...

CVE-2020-9967

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A remote attacker may be able to...

CVE-2020-9962

CVE-2020-9962 is associated with Apple macOS FontParser. The vulnerability allowed a buffer overflow when processing a malicious font file, due to insufficient size validation in the FontParser component. This could enable arbitrary code execution. The issue is fixed in macOS Big Sur 11.0.1, with...

CVE-2020-9955

CVE-2020-9955 is an ImageIO out-of-bounds write vulnerability in Apple platforms. Apple reports that processing a maliciously crafted image may lead to arbitrary code execution. Concrete details across connected sources show the issue affecting ImageIO on iOS 14.0 / iPadOS 14.0, tvOS 14.0, watchO...

Apple 多款产品安全漏洞

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system. A security vulnerability exists in multiple Apple products that originates in a sandboxing proce...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur 11.0.1 that allows access to contacts on locked devices...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in multiple Apple products that originates from a maliciously crafted image that could lead to arbitrary code execution. The following products and versions are fixed: macOS Big Sur 11.1 Security Updat...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in multiple Apple products that originates from a local user and may result in unexpected system termination or reading of kernel memory. The following products and versions are fixed: macOS Big Sur...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur prior to version 11.0.1, which originates from a user with screen-sharing access being able to view other users' screens...