Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

22 records

Release: Apple iOS and iPadOS 14.2 Clear all filters
TI-2020-16974 CVE-2020-27918 · GHSA-w4gf-42f5-463m

Use after free in Apple watchOS

Priority LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01425 Published 2020-12-08 Partial fix · 7.1, 14.2 +4 CWE-416
TI-2020-16985 CVE-2020-27930 · GHSA-pcwp-p8jm-7xc7

Out-of-bounds write in Apple watchOS

Priority CRITICAL 93KEV

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.22009 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-787
TI-2020-16987 CVE-2020-27932 · GHSA-f3wv-rx3x-v6fh

Type confusion in Apple watchOS

Priority CRITICAL 93KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.10337 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-843
TI-2020-16973 CVE-2020-27917 · GHSA-j6gq-g7hh-gvmp

Use after free in Apple watchOS

Priority LOW 38

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01723 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-416
TI-2020-16982 CVE-2020-27926 · GHSA-p532-pqr4-xw4g

Use after free in Apple iOS and iPadOS

Priority LOW 36

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01169 Published 2020-12-08 Fixed in 14.2 CWE-416
TI-2020-16972 CVE-2020-27916 · GHSA-2qv5-c5x6-3fqr

Out-of-bounds write in Apple watchOS

Priority LOW 37

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01621 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-787
TI-2020-16983 CVE-2020-27927 · GHSA-m694-ffqc-42hh

Out-of-bounds write in Apple watchOS

Priority LOW 37

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01262 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-787
TI-2020-16968 CVE-2020-27911 · GHSA-hf7r-8668-4mm7

Integer overflow in Apple watchOS

Priority MEDIUM 40

An integer overflow was addressed through improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03398 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-190
TI-2020-16969 CVE-2020-27912 · GHSA-crrf-7wcm-2c9m

Out-of-bounds write in Apple watchOS

Priority LOW 38

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01826 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-787
TI-2020-16966 CVE-2020-27909 · GHSA-34wc-m69q-wgr7

Out-of-bounds read in Apple watchOS

Priority LOW 38

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02223 Published 2020-12-08 Fixed in 7.1, 14.2 CWE-125
TI-2020-16967 CVE-2020-27910 · GHSA-x9xh-p9v3-367p

Out-of-bounds read in Apple watchOS

Priority LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01663 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-125
TI-2020-16962 CVE-2020-27905 · GHSA-98j3-8c3p-wjgw

Out-of-bounds write in Apple watchOS

Priority LOW 37

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01329 Published 2020-12-08 Fixed in 7.1, 14.2 CWE-787
TI-2020-16959 CVE-2020-27902 · GHSA-p276-c5v8-f347

Missing authentication in Apple iOS and iPadOS

Priority LOW 21

An authentication issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.0032 Published 2020-12-08 Fixed in 14.2 CWE-306
TI-2020-08085 CVE-2020-10017 · GHSA-f3rf-mrmp-8fvg

Out-of-bounds write in Apple watchOS

Priority LOW 37

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01419 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-787
TI-2020-08084 CVE-2020-10016 · GHSA-j5cx-chhx-m9h2

Out-of-bounds write in Apple watchOS

Priority LOW 37

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01677 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-787
TI-2020-08071 CVE-2020-10003 · GHSA-9wg8-9g4x-8c9p

Link following in Apple watchOS

Priority LOW 34

An issue existed within the path validation logic for symlinks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00379 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-59
TI-2020-08078 CVE-2020-10010 · GHSA-qv47-9766-h942

Path traversal in Apple watchOS

Priority LOW 34

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00433 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-22