Priority LOW 26
A validation issue was addressed with improved input sanitization.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00847 · Published 2019-12-18 · Fixed in macOS Catalina 10.15.1 CWE-20
Priority LOW 36
An authentication issue was addressed with improved state management.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00331 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 +2 CWE-613
Priority LOW 25
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00344 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 +2 CWE-787
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01398 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 +2 CWE-787
Priority LOW 27
A validation issue was addressed with improved input sanitization.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00922 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 +2 CWE-20
Priority LOW 36
An out-of-bounds read was addressed with improved input validation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0139 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 +2 CWE-125
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01283 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 +2 CWE-787
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01238 · Published 2019-12-18 · Fixed in macOS Catalina 10.15.1 CWE-787
Priority LOW 39
A validation issue existed in the entitlement verification.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02567 · Published 2019-12-18 · Fixed in macOS Catalina 10.15.1
Priority LOW 36
A validation issue was addressed with improved logic.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01036 · Published 2019-12-18 · Fixed in macOS Catalina 10.15.1 CWE-20
Priority LOW 34
A dynamic library loading issue existed in iTunes setup.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00385 · Published 2019-12-18 · Fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2 CWE-426
Priority LOW 27
A validation issue existed in the handling of symlinks.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01306 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 CWE-59
Priority LOW 35
An issue existed in the parsing of URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01222 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 CWE-20
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01361 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 +2 CWE-787
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01346 · Published 2019-12-18 · Fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1 +3 CWE-787