Vulnerabilities

TI-2020-07998 CVE-2020-9925 · GHSA-mqp2-6xg4-x69p

Cross-site scripting in Apple iOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01274 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-79

TI-2020-07989 CVE-2020-9916 · GHSA-xjv7-588c-8c3p

Apple iOS: A malicious attacker may be able to conceal the destination of a URL

LOW 27

A URL Unicode encoding issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01377 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5

TI-2020-07988 CVE-2020-9915 · GHSA-9p56-8h6v-343m

An access issue existed in Content Security Policy.

LOW 32

An access issue existed in Content Security Policy.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01504 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5

TI-2020-07985 CVE-2020-9912 · GHSA-qcmx-2mgh-jp57

Apple Safari: A malicious attacker may be able to change the origin of a frame for a…

LOW 16

A logic issue was addressed with improved restrictions.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00283 Published 2020-10-16 Fixed in Safari 13.1.2

TI-2020-07984 CVE-2020-9911 · GHSA-2f5h-28fw-gwx2

Apple iOS: An issue in Safari Reader mode may allow a remote attacker to bypass the Same…

LOW 36

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0146 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2

TI-2020-07983 CVE-2020-9910 · GHSA-mhx4-5j7f-6rxc

Apple iOS: A malicious attacker with arbitrary read and write capability may be able to…

MEDIUM 42

Multiple issues were addressed with improved logic.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0219 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5

TI-2020-07976 CVE-2020-9903 · GHSA-8pc2-fr94-f97q

Origin validation error in Apple iOS

LOW 33

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00507 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2 CWE-346

TI-2020-07969 CVE-2020-9895 · GHSA-j4v5-6jrm-p9fx

Use after free in Apple iOS

MEDIUM 49

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04491 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416

TI-2020-07968 CVE-2020-9894 · GHSA-cgf9-hgh6-4hrm

Out-of-bounds read in Apple iOS

LOW 25

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02837 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-125

TI-2020-07967 CVE-2020-9893 · GHSA-8m3c-93m2-83h7

Use after free in Apple iOS

MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02949 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416

TI-2020-07938 CVE-2020-9862 · GHSA-qv6h-hj4m-385f

Improper output encoding in Apple iOS

LOW 38

A command injection issue existed in Web Inspector.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01922 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-116

Vulnerabilities

Filters