Vulnerabilities

TI-2020-16974 CVE-2020-27918 · GHSA-w4gf-42f5-463m

Use after free in Apple watchOS

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01425 Published 2020-12-08 Partial fix · 7.1, 14.2 +4 CWE-416

TI-2020-08061 CVE-2020-9991 · GHSA-5pgw-jw9q-8cfq

Apple tvOS: A remote attacker may be able to cause a denial of service

LOW 38

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02822 Published 2020-12-08 Fixed in 14.0, 7.0 +2

TI-2020-16953 CVE-2020-27896 · GHSA-g5hr-gmvw-m425

Path traversal in Apple macOS

LOW 28

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01451 Published 2020-12-08 Fixed in 11.0 CWE-22

TI-2020-16985 CVE-2020-27930 · GHSA-pcwp-p8jm-7xc7

Out-of-bounds write in Apple watchOS

CRITICAL 93KEV

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.22009 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-787

TI-2020-17004 CVE-2020-27950 · GHSA-76v6-7m6g-p6v4

Apple watchOS: A malicious application may be able to disclose kernel memory

HIGH 82KEV

A memory initialization issue was addressed.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.1652 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-665

TI-2020-16987 CVE-2020-27932 · GHSA-f3wv-rx3x-v6fh

Type confusion in Apple watchOS

CRITICAL 93KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.10337 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-843

TI-2020-16973 CVE-2020-27917 · GHSA-j6gq-g7hh-gvmp

Use after free in Apple watchOS

LOW 38

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01723 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-416

TI-2020-16972 CVE-2020-27916 · GHSA-2qv5-c5x6-3fqr

Out-of-bounds write in Apple watchOS

LOW 37

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01621 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-787

TI-2020-16983 CVE-2020-27927 · GHSA-m694-ffqc-42hh

Out-of-bounds write in Apple watchOS

LOW 37

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01262 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-787

TI-2020-16968 CVE-2020-27911 · GHSA-hf7r-8668-4mm7

Integer overflow in Apple watchOS

MEDIUM 40

An integer overflow was addressed through improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03398 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-190

TI-2020-16969 CVE-2020-27912 · GHSA-crrf-7wcm-2c9m

Out-of-bounds write in Apple watchOS

LOW 38

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01826 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-787

TI-2020-16967 CVE-2020-27910 · GHSA-x9xh-p9v3-367p

Out-of-bounds read in Apple watchOS

LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01663 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-125

TI-2020-16963 CVE-2020-27906 · GHSA-h5vh-qch6-xh9m

Integer overflow in Apple macOS

MEDIUM 43

Multiple integer overflows were addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0289 Published 2020-12-08 Fixed in 11.0 CWE-190

TI-2020-16955 CVE-2020-27898 · GHSA-qq7j-g886-9qqh

Apple macOS: An attacker may be able to bypass Managed Frame Protection

LOW 27

A denial of service issue was addressed with improved state handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01003 Published 2020-12-08 Fixed in 11.0 CWE-252

TI-2020-16961 CVE-2020-27904 · GHSA-9mg9-93fp-h68f

A logic issue existed resulting in memory corruption.

MEDIUM 40

A logic issue existed resulting in memory corruption.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03142 Published 2020-12-08 Fixed in 11.0

TI-2020-16960 CVE-2020-27903 · GHSA-qj3w-cxqj-5rxq

Apple macOS: An application may be able to gain elevated privileges

LOW 36

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01166 Published 2020-12-08 Fixed in 11.0

TI-2020-16957 CVE-2020-27900 · GHSA-gph7-96qh-f4cv

An issue existed in the handling of snapshots.

LOW 27

An issue existed in the handling of snapshots.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00955 Published 2020-12-08 Fixed in 11.0

TI-2020-08085 CVE-2020-10017 · GHSA-f3rf-mrmp-8fvg

Out-of-bounds write in Apple watchOS

LOW 37

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01419 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-787

TI-2020-16951 CVE-2020-27894 · GHSA-xhr2-gj6g-mm67

Apple macOS: Users may be unable to remove metadata indicating where files were…

LOW 26

The issue was addressed with additional user controls.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00708 Published 2020-12-08 Fixed in 11.0

TI-2020-08082 CVE-2020-10014 · GHSA-h8r9-5w83-vj2q

Path traversal in Apple macOS

LOW 30

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.01091 Published 2020-12-08 Fixed in 11.0 CWE-22

TI-2020-08084 CVE-2020-10016 · GHSA-j5cx-chhx-m9h2

Out-of-bounds write in Apple watchOS

LOW 37

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01677 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-787

TI-2020-08080 CVE-2020-10012 · GHSA-52pf-qm7m-948q

Cross-site scripting in Apple macOS

LOW 29

An access issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01043 Published 2020-12-08 Fixed in 11.0 CWE-79

TI-2020-08075 CVE-2020-10007 · GHSA-w86c-g85x-gccf

Apple macOS: A malicious application may be able to determine kernel memory layout

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00391 Published 2020-12-08 Fixed in 11.0

TI-2020-08071 CVE-2020-10003 · GHSA-9wg8-9g4x-8c9p

Link following in Apple watchOS

LOW 34

An issue existed within the path validation logic for symlinks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00379 Published 2020-12-08 Fixed in 7.1, 14.2 +1 CWE-59

TI-2020-08072 CVE-2020-10004 · GHSA-39cq-84vm-mrq4

Apple iOS and iPadOS: Opening a maliciously crafted file may lead to unexpected…

LOW 37

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0143 Published 2020-12-08 Fixed in 14.2, 11.0

Vulnerabilities

Filters