Read the docs
Red Hat Security Advisory

RHSA-2020:4451

GNOME security, bug fix, and enhancement update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 57 records

TI-2021-11140 CVE-2021-30762 · GHSA-gj4g-95xx-7pc7

Use after free in Apple iOS

Priority CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10986 Published 2021-09-08 Partial fix · 12.5 CWE-416
TI-2021-11139 CVE-2021-30761 · GHSA-6qp6-2ggr-xv6x

Out-of-bounds write in Apple iOS

Priority CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10545 Published 2021-09-08 Partial fix · 12.5 CWE-787
TI-2021-11051 CVE-2021-30666 · GHSA-4cx8-frpf-fjc3

Memory corruption in Apple iOS

Priority CRITICAL 97KEV

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02998 Published 2021-09-08 Partial fix · 12.5 CWE-119
TI-2019-06284 CVE-2019-8720 · GHSA-5cgp-g38q-m4xj

Memory corruption in webkitgtk

Priority CRITICAL 97KEV

A vulnerability was found in WebKit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01556 Published 2023-03-06 Partial fix CWE-119
TI-2019-06380 CVE-2019-8820 · GHSA-6vqf-wwv4-9qqh

Out-of-bounds write in Apple iOS

Priority MEDIUM 50

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09621 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +5 CWE-787
TI-2020-07969 CVE-2020-9895 · GHSA-j4v5-6jrm-p9fx

Use after free in Apple iOS

Priority MEDIUM 49

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04491 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416
TI-2020-03397 CVE-2020-3897 · GHSA-gqfj-ph97-xjrx

Type confusion in Apple iOS

Priority MEDIUM 46

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0466 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-843
TI-2020-09470 CVE-2020-11793 · GHSA-9rmm-vmrf-4wgf

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via…

Priority MEDIUM 43

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2020-04-17 Partial fix CWE-416
TI-2020-07967 CVE-2020-9893 · GHSA-8m3c-93m2-83h7

Use after free in Apple iOS

Priority MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02949 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416
TI-2020-03395 CVE-2020-3895 · GHSA-cq67-m6v6-w4gx

Out-of-bounds write in Apple iOS

Priority MEDIUM 43

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02643 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-787
TI-2020-03370 CVE-2020-3868 · GHSA-whv5-w93h-96xh

Out-of-bounds write in Apple iOS

Priority MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.027 Published 2020-02-27 Partial fix · iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1 +4 CWE-787
TI-2019-06404 CVE-2019-8846 · GHSA-69vj-962m-hmhv

Use after free in Apple iOS and iPadOS

Priority MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02335 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-416
TI-2019-06377 CVE-2019-8816 · GHSA-76gq-g959-wh33

Out-of-bounds write in Apple iOS

Priority MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02583 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +5 CWE-787
TI-2019-06375 CVE-2019-8814 · GHSA-6q6f-rf7h-v684

Out-of-bounds write in Apple iOS

Priority MEDIUM 43

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02542 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787
TI-2020-07885 CVE-2020-9807 · GHSA-3w5h-qwww-3fff

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01848 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-787
TI-2020-07884 CVE-2020-9806 · GHSA-6m96-8rvh-6274

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01863 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-787
TI-2020-07881 CVE-2020-9803 · GHSA-7367-6vqq-q8g3

Improper input validation in Apple iOS

Priority MEDIUM 42

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01845 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-20
TI-2020-03401 CVE-2020-3901 · GHSA-rqcj-mh6f-fw77

Type confusion in Apple iOS

Priority MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01908 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-843
TI-2020-03400 CVE-2020-3900 · GHSA-3frw-3f6f-6qx4

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01899 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-787
TI-2020-03367 CVE-2020-3865 · GHSA-xx38-8wp6-c2jw

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01858 Published 2020-02-27 Partial fix · iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1 +4 CWE-787
TI-2019-06403 CVE-2019-8844 · GHSA-278v-44j3-pqxv

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02271 Published 2020-10-27 Partial fix · 13.3, 6.1 +4 CWE-787
TI-2019-06395 CVE-2019-8835 · GHSA-p64v-jc94-867w

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02106 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-787
TI-2019-06383 CVE-2019-8823 · GHSA-hc9p-73qq-vv24

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0192 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787
TI-2019-06379 CVE-2019-8819 · GHSA-pfqm-p36c-3cvf

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0192 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787
TI-2019-06376 CVE-2019-8815 · GHSA-hwwm-gxjr-wcpw

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02291 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787
TI-2019-06373 CVE-2019-8812 · GHSA-jpv4-c5p3-23x2

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0189 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-787
TI-2019-06372 CVE-2019-8811 · GHSA-4fc2-7qm9-mmc9

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01997 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +5 CWE-787
TI-2019-06370 CVE-2019-8808 · GHSA-pw88-5956-4grp

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0186 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-787
TI-2019-06345 CVE-2019-8783 · GHSA-fwwh-2m37-687c

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01952 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +4 CWE-787
TI-2019-06344 CVE-2019-8782 · GHSA-24j8-j3f5-wfw6

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0186 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-787
TI-2019-06329 CVE-2019-8766 · GHSA-7qvc-7cr4-mffx

Out-of-bounds write in Apple watchOS

Priority MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0172 Published 2019-12-18 Partial fix · watchOS 6.1, iCloud for Windows 11.0 CWE-787
TI-2019-06306 CVE-2019-8743 · GHSA-vwxq-9822-h934

Out-of-bounds write in Apple watchOS

Priority MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01558 Published 2019-12-18 Partial fix · watchOS 6.1 CWE-787
TI-2019-06276 CVE-2019-8710 · GHSA-2cfg-h7c9-q2qm

Out-of-bounds write in Apple iCloud for Windows

Priority MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01558 Published 2019-12-18 Partial fix · iCloud for Windows 11.0 CWE-787
TI-2020-07938 CVE-2020-9862 · GHSA-qv6h-hj4m-385f

Improper output encoding in Apple iOS

Priority LOW 38

A command injection issue existed in Web Inspector.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01922 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-116
TI-2020-08025 CVE-2020-9952 · GHSA-2hf4-pxq2-63h5

Cross-site scripting in Apple iOS

Priority LOW 34

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01497 Published 2020-10-16 Partial fix · iOS 14.0 and iPadOS 14.0, tvOS 14.0 +4 CWE-79
TI-2020-07920 CVE-2020-9843 · GHSA-9c59-pwqp-c9gc

Cross-site scripting in Apple iOS

Priority LOW 34

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01156 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-79
TI-2020-07883 CVE-2020-9805 · GHSA-8v3h-22p7-j9pw

Cross-site scripting in Apple iOS

Priority LOW 34

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01214 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-79
TI-2020-03366 CVE-2020-3864 · GHSA-wwr3-9qhx-q62f

Origin validation error in Apple iOS and iPadOS

Priority LOW 34

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00404 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-346
TI-2020-07988 CVE-2020-9915 · GHSA-9p56-8h6v-343m

An access issue existed in Content Security Policy.

Priority LOW 32

An access issue existed in Content Security Policy.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01504 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5
TI-2020-07998 CVE-2020-9925 · GHSA-mqp2-6xg4-x69p

Cross-site scripting in Apple iOS

Priority LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01274 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-79
TI-2020-03402 CVE-2020-3902 · GHSA-3pw6-wvqq-cwg5

Cross-site scripting in Apple iOS

Priority LOW 30

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01153 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-79
TI-2020-03369 CVE-2020-3867 · GHSA-9r2g-r54v-5426

Cross-site scripting in Apple iOS

Priority LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01386 Published 2020-02-27 Partial fix · iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1 +4 CWE-79
TI-2019-06374 CVE-2019-8813 · GHSA-36c3-vq66-wvcg

Cross-site scripting in Apple iOS

Priority LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0132 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-79
TI-2019-06199 CVE-2019-8625 · GHSA-23gq-523p-hvrg

Cross-site scripting in Apple tvOS

Priority LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0122 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-79
TI-2019-06334 CVE-2019-8771 · GHSA-w6pm-jp6h-x3pq

Clickjacking in Apple Safari

Priority LOW 29

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01035 Published 2020-10-27 Partial fix · 13.0, 13 CWE-1021
TI-2019-06327 CVE-2019-8764 · GHSA-8g88-79gg-9jfg

Cross-site scripting in Apple watchOS

Priority LOW 29

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00974 Published 2019-12-18 Partial fix · watchOS 6.1 CWE-79
TI-2020-11259 CVE-2020-14391 · GHSA-95g9-pcvg-9462

Insufficiently protected credentials in gnome-settings-daemon

Priority LOW 25

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal credentials when a user registers a system through the GNOME Settings Use…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00321 Published 2021-02-08 Fixed CWE-522
TI-2020-07968 CVE-2020-9894 · GHSA-cgf9-hgh6-4hrm

Out-of-bounds read in Apple iOS

Priority LOW 25

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02837 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-125
TI-2020-03385 CVE-2020-3885 · GHSA-mqcp-c96v-gj7w

Apple iOS: A file URL may be incorrectly processed

Priority LOW 23

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01707 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-670
TI-2019-06332 CVE-2019-8769 · GHSA-x3pj-hqmh-9r9q

An issue existed in the drawing of web page elements.

Priority LOW 23

An issue existed in the drawing of web page elements.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01241 Published 2019-12-18 Partial fix · iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15
TI-2020-03394 CVE-2020-3894 · GHSA-86x5-95qc-wmgh

Race condition in Apple iOS

Priority LOW 18

A race condition was addressed with additional validation.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.01135 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-362