Macos Security Vulnerabilities and Issues — Page 6 of Macos CVE List

Lucene search

AppleMacos

326 matches found

CVE•added 2020/02/27 9:15 p.m.•57 views

CVE-2020-3871

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS8.2AI score0.00374EPSS

CVE•added 2020/04/01 6:15 p.m.•57 views

CVE-2020-3892

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.8AI score0.00302EPSS

CVE•added 2020/10/16 5:15 p.m.•57 views

CVE-2020-9799

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.9AI score0.00245EPSS

CVE•added 2020/06/09 5:15 p.m.•57 views

CVE-2020-9834

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.5AI score0.00245EPSS

CVE•added 2020/12/08 8:15 p.m.•57 views

CVE-2020-9922

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously crafted email may lead to writing arbitrary files.

6.5CVSS6.1AI score0.00405EPSS

CVE•added 2020/10/22 7:15 p.m.•57 views

CVE-2020-9935

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6. A user may be unexpectedly logged in to another user’s account.

4.3CVSS5.3AI score0.00231EPSS

CVE•added 2020/10/22 7:15 p.m.•57 views

CVE-2020-9940

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

7.8CVSS8.2AI score0.00952EPSS

CVE•added 2020/10/22 7:15 p.m.•57 views

CVE-2020-9997

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, watchOS 6.2.8. A malicious application may disclose restricted memory.

5.5CVSS5.6AI score0.00178EPSS

CVE•added 2020/10/27 8:15 p.m.•56 views

CVE-2018-4467

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious applic...

7.8CVSS6.9AI score0.00222EPSS

CVE•added 2020/10/27 8:15 p.m.•56 views

CVE-2019-8767

A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Processing a maliciously crafted string may lead to heap corruption.

9.8CVSS7.5AI score0.00451EPSS

CVE•added 2020/10/27 8:15 p.m.•56 views

CVE-2019-8837

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. A malicious application may be able to access restricted files.

9.3CVSS6.8AI score0.00179EPSS

CVE•added 2020/12/08 8:15 p.m.•56 views

CVE-2020-10009

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions.

5.5CVSS5.4AI score0.00302EPSS

CVE•added 2020/06/09 4:15 p.m.•56 views

CVE-2020-3882

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.

6.5CVSS5.9AI score0.01115EPSS

CVE•added 2020/04/01 6:15 p.m.•56 views

CVE-2020-3893

9.3CVSS7.8AI score0.00302EPSS

CVE•added 2020/04/01 6:15 p.m.•56 views

CVE-2020-3906

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.4. A maliciously crafted application may be able to bypass code signing enforcement.

7.8CVSS6.8AI score0.00256EPSS

CVE•added 2020/04/01 6:15 p.m.•56 views

CVE-2020-3913

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, watchOS 6.2. A malicious application may be able to elevate privileges.

7.8CVSS6.8AI score0.00196EPSS

CVE•added 2020/10/22 6:15 p.m.•56 views

CVE-2020-9779

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.

7.1CVSS6AI score0.00039EPSS

CVE•added 2020/10/22 7:15 p.m.•56 views

CVE-2020-9905

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. A remote attacker may be able to cause a denial of service.

7.5CVSS7.3AI score0.01001EPSS

CVE•added 2020/10/27 8:15 p.m.•55 views

CVE-2019-8509

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A malicious application may be able to elevate privileges.

7.8CVSS7.7AI score0.00256EPSS

CVE•added 2020/10/27 8:15 p.m.•55 views

CVE-2019-8716

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. An application may be able to execute arbitrary code with system privileges.

10CVSS8.8AI score0.00567EPSS

CVE•added 2020/04/01 6:15 p.m.•55 views

CVE-2020-3903

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.4. An application may be able to execute arbitrary code with system privileges.

9.3CVSS7.9AI score0.00302EPSS

CVE•added 2020/06/09 5:15 p.m.•55 views

CVE-2020-9804

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.5. Inserting a USB device that sends invalid messages may cause a kernel panic.

4.9CVSS4.7AI score0.00059EPSS

CVE•added 2020/10/22 6:15 p.m.•55 views

CVE-2020-9810

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.5. A person with physical access to a Mac may be able to bypass Login Window.

6.8CVSS5.4AI score0.00052EPSS

CVE•added 2020/06/09 5:15 p.m.•55 views

CVE-2020-9851

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to modify protected parts of the file system.

5.5CVSS5.2AI score0.00194EPSS

CVE•added 2020/10/22 6:15 p.m.•55 views

CVE-2020-9887

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. Viewing a maliciously crafted JPEG file may lead to arbitrary code execution.

7.8CVSS8AI score0.00343EPSS

CVE•added 2020/10/27 8:15 p.m.•54 views

CVE-2018-4452

A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious applic...

9.3CVSS7.3AI score0.00358EPSS

CVE•added 2020/10/27 8:15 p.m.•54 views

CVE-2019-8539

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. A malicious application may be able to execute arbitrary code with system privileges.

9.3CVSS7.3AI score0.00279EPSS

CVE•added 2020/04/01 6:15 p.m.•54 views

CVE-2020-9769

Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple issues in Vim.

9.8CVSS8.2AI score0.00504EPSS

CVE•added 2020/06/09 5:15 p.m.•54 views

CVE-2020-9833

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.5. A local user may be able to read kernel memory.

5.5CVSS5.1AI score0.00129EPSS

CVE•added 2020/10/22 7:15 p.m.•54 views

CVE-2020-9927

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.8AI score0.00049EPSS

CVE•added 2020/10/27 8:15 p.m.•53 views

CVE-2018-4451

This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation.

9.3CVSS7.8AI score0.00339EPSS

CVE•added 2020/10/27 8:15 p.m.•53 views

CVE-2019-8618

A logic issue was addressed with improved restrictions. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. A sandboxed process may be able to circumvent sandbox restrictions.

7.5CVSS6.8AI score0.00289EPSS

CVE•added 2020/10/27 8:15 p.m.•53 views

CVE-2019-8759

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A local user may be able to cause unexpected system termination or read kernel memory.

7.1CVSS6.7AI score0.0011EPSS

CVE•added 2020/10/27 8:15 p.m.•53 views

CVE-2019-8776

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.

9.3CVSS7.9AI score0.00326EPSS

CVE•added 2020/04/01 6:15 p.m.•53 views

CVE-2020-3904

Multiple memory corruption issues were addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.

9.3CVSS8AI score0.00326EPSS

CVE•added 2020/04/01 6:15 p.m.•53 views

CVE-2020-3907

7.1CVSS6.3AI score0.00036EPSS

CVE•added 2020/10/16 5:15 p.m.•53 views

CVE-2020-9864

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.

10CVSS8.4AI score0.01139EPSS

CVE•added 2020/10/22 6:15 p.m.•53 views

CVE-2020-9869

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A remote attacker may cause an unexpected application termination.

7.5CVSS7.8AI score0.00915EPSS

CVE•added 2020/10/22 7:15 p.m.•53 views

CVE-2020-9928

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS8.5AI score0.00245EPSS

CVE•added 2020/12/08 8:15 p.m.•53 views

CVE-2020-9996

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to elevate privileges.

7.8CVSS6.6AI score0.0031EPSS

CVE•added 2020/10/27 8:15 p.m.•52 views

CVE-2019-8777

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. A local attacker may be able to view contacts from the lock...

2.4CVSS4.2AI score0.00043EPSS

CVE•added 2020/04/01 6:15 p.m.•52 views

CVE-2020-3884

An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to cause arbitrary javascript code execution.

6.1CVSS6.4AI score0.00502EPSS

CVE•added 2020/04/01 6:15 p.m.•52 views

CVE-2020-3905

9.3CVSS7.8AI score0.00302EPSS

CVE•added 2020/10/22 7:15 p.m.•52 views

CVE-2020-9986

A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information.

4.3CVSS4.2AI score0.00157EPSS

CVE•added 2020/10/27 8:15 p.m.•51 views

CVE-2018-4296

This issue is fixed in macOS Mojave 10.14. A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.

9.8CVSS8.3AI score0.00381EPSS

CVE•added 2020/10/27 8:15 p.m.•51 views

CVE-2018-4468

This issue was addressed by removing additional entitlements. This issue is fixed in macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra. A malicious application may be able to access restricted files.

5.5CVSS6.3AI score0.00226EPSS

CVE•added 2020/10/27 8:15 p.m.•51 views

CVE-2019-8538

A denial of service issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. Processing a maliciously crafted vcf file may lead to a denial of service.

5.5CVSS5.5AI score0.00196EPSS

CVE•added 2020/10/27 8:15 p.m.•51 views

CVE-2019-8640

A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra. A sandboxed process may be able to circumvent sandbox restrictions.

7.5CVSS6.9AI score0.00241EPSS

CVE•added 2020/10/27 8:15 p.m.•51 views

CVE-2019-8839

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. An attacker in a privileged position may be able to perform a denial of service attack.

5.5CVSS5.8AI score0.00313EPSS

CVE•added 2020/04/01 6:15 p.m.•51 views

CVE-2020-3908

7.1CVSS6.3AI score0.00039EPSS

Total number of security vulnerabilities326