Red Hat Security Advisory

RHSA-2020:4035

webkitgtk4 security, bug fix, and enhancement update

Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) webkitgtk4-2.28.2-2.el7, webkitgtk4-jsc-2.28.2-2.el7
Red Hat Enterprise Linux Client Optional (v. 7) webkitgtk4-devel-2.28.2-2.el7, webkitgtk4-doc-2.28.2-2.el7, webkitgtk4-jsc-devel-2.28.2-2.el7
Red Hat Enterprise Linux ComputeNode (v. 7) webkitgtk4-2.28.2-2.el7, webkitgtk4-jsc-2.28.2-2.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) webkitgtk4-devel-2.28.2-2.el7, webkitgtk4-doc-2.28.2-2.el7, webkitgtk4-jsc-devel-2.28.2-2.el7
Red Hat Enterprise Linux Server (v. 7) webkitgtk4-2.28.2-2.el7, webkitgtk4-2.28.2-2.el7.ppc, webkitgtk4-devel-2.28.2-2.el7 +3
Red Hat Enterprise Linux Server Optional (v. 7) webkitgtk4-devel-2.28.2-2.el7, webkitgtk4-devel-2.28.2-2.el7.ppc, webkitgtk4-doc-2.28.2-2.el7 +2
Red Hat Enterprise Linux Workstation (v. 7) webkitgtk4-2.28.2-2.el7, webkitgtk4-devel-2.28.2-2.el7, webkitgtk4-jsc-2.28.2-2.el7 +1
Red Hat Enterprise Linux Workstation Optional (v. 7) webkitgtk4-doc-2.28.2-2.el7

Fixes 104 records

TI-2021-11140 CVE-2021-30762 · GHSA-gj4g-95xx-7pc7

Use after free in Apple iOS

CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10986 Published 2021-09-08 Partial fix · 12.5 CWE-416

TI-2021-11139 CVE-2021-30761 · GHSA-6qp6-2ggr-xv6x

Out-of-bounds write in Apple iOS

CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10545 Published 2021-09-08 Partial fix · 12.5 CWE-787

TI-2021-11051 CVE-2021-30666 · GHSA-4cx8-frpf-fjc3

Memory corruption in Apple iOS

CRITICAL 97KEV

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02998 Published 2021-09-08 Partial fix · 12.5 CWE-119

TI-2019-06284 CVE-2019-8720 · GHSA-5cgp-g38q-m4xj

Memory corruption in webkitgtk

CRITICAL 97KEV

A vulnerability was found in WebKit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01556 Published 2023-03-06 Partial fix CWE-119

TI-2019-06084 CVE-2019-8506 · GHSA-fg7h-q67h-82rg

Type confusion in Apple iOS

CRITICAL 97KEV

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.16159 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-843

TI-2019-06256 CVE-2019-8689 · GHSA-jj3w-68r8-9c3g

Out-of-bounds write in Apple iOS

MEDIUM 53

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13642 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787

TI-2019-06239 CVE-2019-8672 · GHSA-96vv-4v74-xc29

Out-of-bounds write in Apple iOS

MEDIUM 51

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.11113 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787

TI-2020-08086 CVE-2020-10018 · GHSA-37vm-m2gx-6h3h

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right…

MEDIUM 50

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04987 Published 2020-03-02 Partial fix CWE-416

TI-2019-06380 CVE-2019-8820 · GHSA-6vqf-wwv4-9qqh

Out-of-bounds write in Apple iOS

MEDIUM 50

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09621 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +5 CWE-787

TI-2019-06238 CVE-2019-8671 · GHSA-mwvc-v6v5-5p39

Out-of-bounds write in Apple iOS

MEDIUM 49

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08479 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-787

TI-2019-06197 CVE-2019-8623 · GHSA-vq4j-69c9-q6rm

Out-of-bounds write in Apple iOS

MEDIUM 49

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08354 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +5 CWE-787

TI-2019-06196 CVE-2019-8622 · GHSA-xfjj-4fqf-vx76

Out-of-bounds write in Apple iOS

MEDIUM 49

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08354 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +5 CWE-787

TI-2019-06187 CVE-2019-8611 · GHSA-5hrx-6xhx-79cj

Out-of-bounds write in Apple iOS

MEDIUM 49

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08479 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06328 CVE-2019-8765 · GHSA-6mhg-333v-q39c

Out-of-bounds write in Apple watchOS

MEDIUM 48

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06983 Published 2019-12-18 Partial fix · watchOS 6.1 CWE-787

TI-2019-06134 CVE-2019-8558 · GHSA-jj32-8cmg-q469

Out-of-bounds write in Apple iOS

MEDIUM 48

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07536 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787

TI-2020-03397 CVE-2020-3897 · GHSA-gqfj-ph97-xjrx

Type confusion in Apple iOS

MEDIUM 46

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0466 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-843

TI-2020-03399 CVE-2020-3899 · GHSA-r89q-c9hq-6hvp

Apple iOS: A remote attacker may be able to cause arbitrary code execution

MEDIUM 45

A memory consumption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04117 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5

TI-2019-06177 CVE-2019-8601 · GHSA-4g55-jg35-rh33

Integer overflow in Apple iOS

MEDIUM 45

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04053 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +5 CWE-190

TI-2020-09470 CVE-2020-11793 · GHSA-9rmm-vmrf-4wgf

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via…

MEDIUM 43

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2020-04-17 Partial fix CWE-416

TI-2020-03395 CVE-2020-3895 · GHSA-cq67-m6v6-w4gx

Out-of-bounds write in Apple iOS

MEDIUM 43

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02643 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-787

TI-2020-03370 CVE-2020-3868 · GHSA-whv5-w93h-96xh

Out-of-bounds write in Apple iOS

MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.027 Published 2020-02-27 Partial fix · iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1 +4 CWE-787

TI-2019-06404 CVE-2019-8846 · GHSA-69vj-962m-hmhv

Use after free in Apple iOS and iPadOS

MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02335 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-416

TI-2019-06377 CVE-2019-8816 · GHSA-76gq-g959-wh33

Out-of-bounds write in Apple iOS

MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02583 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +5 CWE-787

TI-2019-06375 CVE-2019-8814 · GHSA-6q6f-rf7h-v684

Out-of-bounds write in Apple iOS

MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02542 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787

TI-2019-06255 CVE-2019-8688 · GHSA-8chq-c2pp-7w9h

Out-of-bounds write in Apple iOS

MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02337 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787

TI-2019-06251 CVE-2019-8684 · GHSA-2x27-qff4-6hf8

Out-of-bounds write in Apple iOS

MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02442 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787

TI-2019-06243 CVE-2019-8676 · GHSA-f2cm-2ggv-x4xj

Out-of-bounds write in Apple iOS

MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02482 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787

TI-2019-06236 CVE-2019-8669 · GHSA-fc2m-c6gh-gwrm

Out-of-bounds write in Apple iOS

MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02598 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787

TI-2019-06121 CVE-2019-8544 · GHSA-7cj7-pfg5-fxwf

Out-of-bounds write in Apple iOS

MEDIUM 43

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02348 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787

TI-2020-03401 CVE-2020-3901 · GHSA-rqcj-mh6f-fw77

Type confusion in Apple iOS

MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01908 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-843

TI-2020-03400 CVE-2020-3900 · GHSA-3frw-3f6f-6qx4

Out-of-bounds write in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01899 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-787

TI-2020-03367 CVE-2020-3865 · GHSA-xx38-8wp6-c2jw

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01858 Published 2020-02-27 Partial fix · iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1 +4 CWE-787

TI-2019-06403 CVE-2019-8844 · GHSA-278v-44j3-pqxv

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02271 Published 2020-10-27 Partial fix · 13.3, 6.1 +4 CWE-787

TI-2019-06395 CVE-2019-8835 · GHSA-p64v-jc94-867w

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02106 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-787

TI-2019-06383 CVE-2019-8823 · GHSA-hc9p-73qq-vv24

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0192 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787

TI-2019-06382 CVE-2019-8822 · GHSA-m7cp-cc3g-rq5q

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02067 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787

TI-2019-06381 CVE-2019-8821 · GHSA-jm74-xjhx-mm4p

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02067 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787

TI-2019-06379 CVE-2019-8819 · GHSA-pfqm-p36c-3cvf

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0192 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787

TI-2019-06376 CVE-2019-8815 · GHSA-hwwm-gxjr-wcpw

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02291 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787

TI-2019-06373 CVE-2019-8812 · GHSA-jpv4-c5p3-23x2

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0189 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-787

TI-2019-06372 CVE-2019-8811 · GHSA-4fc2-7qm9-mmc9

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01997 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +5 CWE-787

TI-2019-06370 CVE-2019-8808 · GHSA-pw88-5956-4grp

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0186 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-787

TI-2019-06345 CVE-2019-8783 · GHSA-fwwh-2m37-687c

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01952 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787

TI-2019-06344 CVE-2019-8782 · GHSA-24j8-j3f5-wfw6

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0186 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-787

TI-2019-06326 CVE-2019-8763 · GHSA-ccjh-pfg3-ch59

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01892 Published 2019-12-18 Partial fix · iOS 13.1 and iPadOS 13.1, tvOS 13 +4 CWE-787

TI-2019-06298 CVE-2019-8735 · GHSA-fq59-5j2w-fw9q

Out-of-bounds write in Apple tvOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01892 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-787

TI-2019-06296 CVE-2019-8733 · GHSA-2j6f-ff8c-5pq9

Out-of-bounds write in Apple tvOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01892 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-787

TI-2019-06290 CVE-2019-8726 · GHSA-mgrw-rrgf-hq58

Out-of-bounds write in Apple tvOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01818 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-787

TI-2019-06273 CVE-2019-8707 · GHSA-q7gx-fqm9-p999

Out-of-bounds write in Apple tvOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01892 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-787

TI-2019-06254 CVE-2019-8687 · GHSA-h25q-f2xx-869f

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-787

TI-2019-06253 CVE-2019-8686 · GHSA-x537-37jq-vh38

Use after free in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-416

TI-2019-06250 CVE-2019-8683 · GHSA-pjqj-wr5v-4342

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01839 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787

TI-2019-06248 CVE-2019-8681 · GHSA-2h5v-wwhm-x53c

Use after free in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01797 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-416

TI-2019-06247 CVE-2019-8680 · GHSA-9jwg-hwxj-wmgx

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-787

TI-2019-06246 CVE-2019-8679 · GHSA-4p6v-55g5-cqg9

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-787

TI-2019-06245 CVE-2019-8678 · GHSA-65mq-p84h-2c7f

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02012 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-787

TI-2019-06244 CVE-2019-8677 · GHSA-x56w-f8v2-mmj6

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01797 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-787

TI-2019-06240 CVE-2019-8673 · GHSA-w924-4pr9-6q2j

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01995 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-787

TI-2019-06233 CVE-2019-8666 · GHSA-35q5-r29v-56m2

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01797 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-787

TI-2019-06216 CVE-2019-8644 · GHSA-3wx7-h26j-wp5f

Use after free in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01746 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-416

TI-2019-06194 CVE-2019-8619 · GHSA-2c93-2ccm-q98v

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06186 CVE-2019-8610 · GHSA-8v73-q7g9-q8gq

Use after free in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01995 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-416

TI-2019-06185 CVE-2019-8609 · GHSA-7xw9-gpxf-hff3

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01995 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06172 CVE-2019-8596 · GHSA-3rf5-gg5c-jh3p

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01995 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06171 CVE-2019-8595 · GHSA-xhwh-gmq8-c8f4

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06170 CVE-2019-8594 · GHSA-p9hj-jvqg-w5w2

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06163 CVE-2019-8587 · GHSA-4m4c-x36x-m5w4

Improper array index validation in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01797 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-129

TI-2019-06162 CVE-2019-8586 · GHSA-6rcg-qvr5-p3c5

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06160 CVE-2019-8584 · GHSA-58q4-h5mm-8v85

Use after free in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-416

TI-2019-06159 CVE-2019-8583 · GHSA-jxx3-m83x-x6jh

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02009 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +5 CWE-787

TI-2019-06147 CVE-2019-8571 · GHSA-h2pc-5xwr-hqv8

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01797 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06139 CVE-2019-8563 · GHSA-7j96-jhpg-mggh

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0174 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787

TI-2019-06135 CVE-2019-8559 · GHSA-qj23-qqxr-6g3c

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01769 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787

TI-2019-06114 CVE-2019-8536 · GHSA-3f9p-7mj8-2f34

Out-of-bounds write in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02078 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787

TI-2019-06113 CVE-2019-8535 · GHSA-g65r-99hv-qpfv

Out-of-bounds write in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02185 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-787

TI-2019-06102 CVE-2019-8524 · GHSA-2g9q-g8g7-r7xw

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01798 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-787

TI-2019-04449 CVE-2019-6251 · GHSA-w36c-w6x2-gj2r

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing…

MEDIUM 42

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections.

CVSS 3.0HIGH 8.1 Network No auth User interaction EPSS 0.04258 Published 2019-01-14 Partial fix

TI-2019-04435 CVE-2019-6237 · GHSA-9qg5-m58m-vw59

Out-of-bounds write in Apple iOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01963 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06329 CVE-2019-8766 · GHSA-7qvc-7cr4-mffx

Out-of-bounds write in Apple watchOS

MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0172 Published 2019-12-18 Partial fix · watchOS 6.1, iCloud for Windows 11.0 CWE-787

TI-2019-06306 CVE-2019-8743 · GHSA-vwxq-9822-h934

Out-of-bounds write in Apple watchOS

MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01558 Published 2019-12-18 Partial fix · watchOS 6.1 CWE-787

TI-2019-06276 CVE-2019-8710 · GHSA-2cfg-h7c9-q2qm

Out-of-bounds write in Apple iCloud for Windows

MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01558 Published 2019-12-18 Partial fix · iCloud for Windows 11.0 CWE-787

TI-2019-06257 CVE-2019-8690 · GHSA-hqph-qgx6-8wvx

Cross-site scripting in Apple iOS

LOW 35

A logic issue existed in the handling of document loads.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04541 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-79

TI-2019-06221 CVE-2019-8649 · GHSA-96w8-j89g-2wmv

Cross-site scripting in Apple iOS

LOW 35

A logic issue existed in the handling of synchronous page loads.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04541 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +5 CWE-79

TI-2020-03366 CVE-2020-3864 · GHSA-wwr3-9qhx-q62f

Origin validation error in Apple iOS and iPadOS

LOW 34

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00404 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-346

TI-2020-03364 CVE-2020-3862 · GHSA-vq6g-4p44-h8hq

Apple iOS: A malicious website may be able to cause a denial of service

LOW 33

A denial of service issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02009 Published 2020-02-27 Partial fix · iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1 +4

TI-2019-06190 CVE-2019-8615 · GHSA-c9w6-g4p4-77xq

Out-of-bounds read in Apple iOS

LOW 33

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02058 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-125

TI-2019-06173 CVE-2019-8597 · GHSA-2wrv-mv5p-jx2g

Out-of-bounds write in Apple iOS

LOW 33

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02058 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787

TI-2019-06183 CVE-2019-8607 · GHSA-2g22-wxjm-8wg2

Out-of-bounds read in Apple iOS

LOW 32

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01645 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +5 CWE-125

TI-2019-06184 CVE-2019-8608 · GHSA-wgc7-wq7g-p4gw

Use after free in Apple iOS

LOW 31

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.01593 Published 2019-12-18 Partial fix · iOS 12.3, macOS Mojave 10.14.5 +4 CWE-416

TI-2020-03402 CVE-2020-3902 · GHSA-3pw6-wvqq-cwg5

Cross-site scripting in Apple iOS

LOW 30

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01153 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-79

TI-2020-03369 CVE-2020-3867 · GHSA-9r2g-r54v-5426

Cross-site scripting in Apple iOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01386 Published 2020-02-27 Partial fix · iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1 +4 CWE-79

TI-2019-08278 CVE-2019-11070 · GHSA-jcch-9vxr-f9mg

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP…

LOW 30

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.03294 Published 2019-04-10 Partial fix CWE-19

TI-2019-06374 CVE-2019-8813 · GHSA-36c3-vq66-wvcg

Cross-site scripting in Apple iOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0132 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-79

TI-2019-06283 CVE-2019-8719 · GHSA-wxv5-c92p-cgm8

Cross-site scripting in Apple tvOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01252 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-79

TI-2019-06225 CVE-2019-8658 · GHSA-5j7q-h2rg-wcc4

Cross-site scripting in Apple iOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01439 Published 2019-12-18 Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-79

TI-2019-06199 CVE-2019-8625 · GHSA-23gq-523p-hvrg

Cross-site scripting in Apple tvOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0122 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-79

TI-2019-06128 CVE-2019-8551 · GHSA-cmg5-g4rq-vw3j

Cross-site scripting in Apple iOS

LOW 30

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01276 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-79

TI-2019-06334 CVE-2019-8771 · GHSA-w6pm-jp6h-x3pq

Clickjacking in Apple Safari

LOW 29

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01035 Published 2020-10-27 Partial fix · 13.0, 13 CWE-1021

TI-2019-06327 CVE-2019-8764 · GHSA-8g88-79gg-9jfg

Cross-site scripting in Apple watchOS

LOW 29

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00974 Published 2019-12-18 Partial fix · watchOS 6.1 CWE-79

TI-2019-06241 CVE-2019-8674 · GHSA-42p8-xc23-48xv

Cross-site scripting in Apple iOS

LOW 29

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01014 Published 2019-12-18 Partial fix · iOS 13, Safari 13 CWE-79

TI-2019-06331 CVE-2019-8768 · GHSA-xc3m-grrh-hxmp

"Clear History and Website Data" did not clear the history.

LOW 27

"Clear History and Website Data" did not clear the history.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01645 Published 2019-12-18 Partial fix · macOS Catalina 10.15 CWE-459

TI-2020-03385 CVE-2020-3885 · GHSA-mqcp-c96v-gj7w

Apple iOS: A file URL may be incorrectly processed

LOW 23

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01707 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-670

TI-2019-06332 CVE-2019-8769 · GHSA-x3pj-hqmh-9r9q

An issue existed in the drawing of web page elements.

LOW 23

An issue existed in the drawing of web page elements.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01241 Published 2019-12-18 Partial fix · iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15

TI-2020-03394 CVE-2020-3894 · GHSA-86x5-95qc-wmgh

Race condition in Apple iOS

LOW 18

A race condition was addressed with additional validation.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.01135 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-362