Vulnerabilities

TI-2020-08025 CVE-2020-9952 · GHSA-2hf4-pxq2-63h5

Cross-site scripting in Apple iOS

LOW 34

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01497 Published 2020-10-16 Partial fix · iOS 14.0 and iPadOS 14.0, tvOS 14.0 +4 CWE-79

TI-2020-08024 CVE-2020-9951 · GHSA-mv2h-wfgr-5q32

Use after free in Apple Safari

MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02333 Published 2020-10-16 Partial fix · Safari 14.0 CWE-416

TI-2020-08021 CVE-2020-9948 · GHSA-f937-gh67-6x56

Type confusion in Apple Safari

MEDIUM 41

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01694 Published 2020-10-16 Partial fix · Safari 14.0 CWE-843

TI-2018-03164 CVE-2018-4209 · GHSA-m9mv-7x4j-x2cw

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3…

MEDIUM 42

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02056 Published 2019-01-11 No fix listed CWE-20

TI-2018-08811 CVE-2018-12294 · GHSA-xf2c-wp2f-v3jr

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+…