CVE-2020-9849

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0. A remote attacker may be able to leak memory...

CVE-2020-9944

CVE-2020-9944: An out-of-bounds read in certain Apple media components was addressed by improved bounds checking. Affected: macOS Big Sur 11.0.1 and prior; affected watchOS 7.0, tvOS 14.0, iOS 14.0, and iPadOS 14.0. Impact (as stated): an application may be able to read restricted memory. Public ...

CVE-2020-9944

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to read restricted memory...

CVE-2020-27950

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...

PT-2020-20926 · Apple · Safari +3

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 7.0 Safari versions prior to 14.0 iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description: The issue may lead to address bar spoofing when visiting a malicious website. It was addressed with improved UI...

iPhone Bug Allowed for Complete Device Takeover Over the Air

Details tied to a stunning iPhone vulnerability were disclosed by noted Google Project Zero researcher Ian Beer. Apple patched the vulnerability earlier this year. But few details, until now, were known about the bug that could have allowed a threat actor to completely take over any iPhone within...

Google Hacker Details Zero-Click 'Wormable' Wi-Fi Exploit to Hack iPhones

Google Project Zero white-hat hacker Ian Beer on Tuesday disclosed details of a now-patched critical "wormable" iOS bug that could have made it possible for a remote attacker to gain complete control of any device in the vicinity over Wi-Fi. The exploit makes it possible to "view all the photos,...

CVE-2020-9952

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack...

Unspecified Vulnerability in Various Apple Products (CNVD-2020-67608)

Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers. A security vulnerability exists in a number of Apple products that stems from the fact that spaced-drop...

CVE-2020-9952

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack...

PT-2020-11854 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 Description: A path handling issue was addressed with improved validation, which may all...

Oracle Linux 8 : GNOME (ELSA-2020-4451)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4451 advisory. - Backport fix for CVE-2020-15503 from Fedora Resolves: 1853529 libsoup Tenable has extracted the preceding description block directly from the Oracle...

PT-2020-16853 · Apple · Macos Catalina +7

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.1 macOS Catalina versions prior to Security Update 2020-001 macOS Mojave versions prior to Security Update 2020-007 iOS versions prior to 14.2 iPadOS versions prior to 14.2 watchOS versions prior to 7.1 tvOS...

PT-2020-6075 · Apple · Icloud For Windows +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.0 iOS versions prior to 14.0 iPadOS versions prior to 14.0 iCloud for Windows versions prior to 7.21 tvOS versions prior to 14.0 Description: This issue is related to errors in resour...

PT-2020-16837 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.2 iPadOS versions prior to 14.2 macOS Big Sur versions prior to 11.0.1 watchOS versions prior to 7.1 tvOS versions prior to 14.2 Description: A use after free issue was addressed with improved memory management. This...

PT-2020-16862 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 14.0 Apple iPadOS versions prior to 14.0 Apple macOS versions prior to 11.1 Apple macOS versions prior to Security Update 2020-001 Catalina Apple macOS versions prior to Security Update 2020-007 Mojave Apple watchO...

PT-2020-20910 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 Description: A logic issue was addressed with improved state management. A malicious application...

PT-2020-20903 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.0 tvOS versions prior to 14.0 iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description: An out-of-bounds read issue was addressed with improved input validation, which may...

PT-2020-16847 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 Description: An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted audio...

PT-2020-20906 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.0 tvOS versions prior to 14.0 iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description: An access issue was addressed with additional sandbox restrictions, which may have...