Vulnerabilities

TI-2020-16974 CVE-2020-27918 · GHSA-w4gf-42f5-463m

Use after free in Apple watchOS

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01425 Published 2020-12-08 Partial fix · 7.1, 14.2 +4 CWE-416

TI-2020-16973 CVE-2020-27917 · GHSA-j6gq-g7hh-gvmp

LOW 38

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01723 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-416

TI-2020-16968 CVE-2020-27911 · GHSA-hf7r-8668-4mm7

MEDIUM 40

An integer overflow was addressed through improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03398 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-190

TI-2020-16969 CVE-2020-27912 · GHSA-crrf-7wcm-2c9m

LOW 38

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01826 Published 2020-12-08 Fixed in 7.1, 14.2 +3 CWE-787

TI-2020-08070 CVE-2020-10002 · GHSA-mq8h-44p4-cp95

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00407 Published 2020-12-08 Fixed in 7.1, 14.2 +3

TI-2020-08051 CVE-2020-9981 · GHSA-6c7m-3c93-428j

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01409 Published 2020-12-08 Fixed in 14.0, 7.0 +3 CWE-416

TI-2020-07925 CVE-2020-9849 · GHSA-45qj-m3fv-x87x

LOW 33

An information disclosure issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02108 Published 2020-12-08 Fixed in 14.0, 7.0 +3 CWE-200