Vulnerabilities

TI-2020-08061 CVE-2020-9991 · GHSA-5pgw-jw9q-8cfq

Apple tvOS: A remote attacker may be able to cause a denial of service

LOW 38

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02822 Published 2020-12-08 Fixed in 14.0, 7.0 +2

TI-2020-08081 CVE-2020-10013 · GHSA-7j6g-h8xc-2hrv

Apple tvOS: An application may be able to execute arbitrary code with kernel privileges

LOW 37

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01346 Published 2020-12-08 Fixed in 14.0

TI-2020-08066 CVE-2020-9996 · GHSA-gc87-63xf-6cg3

Use after free in Apple iOS and iPadOS

LOW 36

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.009 Published 2020-12-08 Fixed in 14.0, 11.0 CWE-416

TI-2020-08059 CVE-2020-9989 · GHSA-7pwm-49q2-r2j5

Apple watchOS: A local user may be able to discover a user’s deleted messages

LOW 25

The issue was addressed with improved deletion.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00326 Published 2020-12-08 Fixed in 7.0, 14.0 +1

TI-2020-08063 CVE-2020-9993 · GHSA-f6p3-gc9f-3r6w

Clickjacking in Apple watchOS

LOW 22

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01116 Published 2020-12-08 Fixed in 7.0, 14.0 CWE-1021

TI-2020-08036 CVE-2020-9965 · GHSA-c4j5-68fc-gm69

Out-of-bounds read in Apple tvOS

LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01475 Published 2020-12-08 Fixed in 14.0, 7.0 +1 CWE-125

TI-2020-08040 CVE-2020-9969 · GHSA-47f7-5hg6-3982

Apple tvOS: A local user may be able to view senstive user information

LOW 25

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0034 Published 2020-12-08 Fixed in 14.0, 7.0 +1

TI-2020-08058 CVE-2020-9988 · GHSA-f7xv-f67j-g3wh

Apple iOS and iPadOS: A local user may be able to discover a user’s deleted messages

LOW 25

The issue was addressed with improved deletion.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00323 Published 2020-12-08 Fixed in 14.0, 11.0

TI-2020-08047 CVE-2020-9977 · GHSA-hj4j-qvhm-2c74

Improper input validation in Apple iOS and iPadOS

LOW 27

A validation issue existed in the entitlement verification.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00926 Published 2020-12-08 Fixed in 14.0, 11.0 CWE-20

TI-2020-08034 CVE-2020-9963 · GHSA-j9m5-gvp8-2g77

Apple iOS and iPadOS: A malicious app may be able to determine the existence of files on…

LOW 27

The issue was addressed with improved handling of icon caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00998 Published 2020-12-08 Fixed in 14.0, 11.0

TI-2020-08042 CVE-2020-9972 · GHSA-6rcv-8mm2-fprm

Buffer overflow in Apple iOS and iPadOS

LOW 37

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01419 Published 2020-12-08 Fixed in 14.0 CWE-120

TI-2020-08016 CVE-2020-9943 · GHSA-f335-pm7q-gvcv

Out-of-bounds read in Apple tvOS

LOW 27

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0115 Published 2020-12-08 Fixed in 14.0, 7.0 +1 CWE-125

TI-2020-08020 CVE-2020-9947 · GHSA-xvmv-wg5c-7x3w

Use after free in Apple tvOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01789 Published 2020-12-08 Partial fix · 14.0, 7.0 +2 CWE-416

TI-2020-08037 CVE-2020-9966 · GHSA-87x6-5wxj-jc6p

Out-of-bounds read in Apple tvOS

LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01262 Published 2020-12-08 Fixed in 14.0, 7.0 +1 CWE-125

TI-2020-08023 CVE-2020-9950 · GHSA-943p-ppxw-x2h4

Use after free in Apple tvOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01457 Published 2020-12-08 Fixed in 14.0, 7.0 CWE-416

TI-2020-07925 CVE-2020-9849 · GHSA-45qj-m3fv-x87x

Information disclosure in Apple tvOS

LOW 33

An information disclosure issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02108 Published 2020-12-08 Fixed in 14.0, 7.0 +3 CWE-200

TI-2020-08017 CVE-2020-9944 · GHSA-vj42-7xv9-r62v

Out-of-bounds read in Apple tvOS

LOW 27

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0115 Published 2020-12-08 Fixed in 14.0, 7.0 +1 CWE-125

Vulnerabilities

Filters