Vulnerabilities

TI-2020-07906 CVE-2020-9828 · GHSA-695x-96wc-2xgv

Out-of-bounds read in Apple macOS

LOW 35

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01176 Published 2020-10-22 Fixed in macOS Catalina 10.15.4 CWE-125

TI-2020-07929 CVE-2020-9853 · GHSA-qw5w-44g5-x7m4

LOW 35

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00791 Published 2020-10-22 Fixed in macOS Catalina 10.15.4 CWE-20

TI-2020-07852 CVE-2020-9772 · GHSA-4qrg-v6p3-7pjf

LOW 25

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00312 Published 2020-10-22 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2

TI-2020-07866 CVE-2020-9787 · GHSA-vjxh-mfpv-ffx4

LOW 27

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01272 Published 2020-10-22 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2

TI-2020-07851 CVE-2020-9771 · GHSA-x973-w3pf-v4m8

LOW 31

This issue was addressed with a new entitlement.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00373 Published 2020-10-22 Fixed in macOS Catalina 10.15.4

TI-2020-07858 CVE-2020-9779 · GHSA-cw24-r423-cm2q

LOW 31

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00315 Published 2020-10-22 Fixed in macOS Catalina 10.15.4 CWE-125

TI-2020-03418 CVE-2020-3918 · GHSA-7cx2-ggh6-cfq5

LOW 25

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00295 Published 2020-10-22 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2

TI-2020-03398 CVE-2020-3898 · GHSA-82r2-pfjv-q743

LOW 34

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00391 Published 2020-10-22 Partial fix · macOS Catalina 10.15.4 CWE-20

TI-2020-03415 CVE-2020-3915 · GHSA-44f3-m9g4-jwrv

LOW 34

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00288 Published 2020-10-22 Fixed in macOS Catalina 10.15.4