Vulnerabilities

TI-2019-06358 CVE-2019-8796 · GHSA-mpwc-4w8x-rmc7

Apple iOS and iPadOS: AirDrop transfers may be unexpectedly accepted while in Everyone…

LOW 26

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00965 Published 2020-10-27 Fixed in 13.2, 10.15 +2

TI-2020-08043 CVE-2020-9973 · GHSA-jgj9-xw7m-fqvv

Out-of-bounds read in Apple macOS

LOW 38

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01945 Published 2020-10-27 Fixed in 10.15, 14.0 CWE-125

TI-2020-08014 CVE-2020-9941 · GHSA-49ww-54rq-93w9

Apple macOS: A remote attacker may be able to unexpectedly alter application state

LOW 38

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0257 Published 2020-10-27 Fixed in 10.15

TI-2020-07933 CVE-2020-9857 · GHSA-7v67-67cj-7535

An issue existed in the parsing of URLs.

LOW 21

An issue existed in the parsing of URLs.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00761 Published 2020-10-27 Fixed in 10.15

TI-2020-03380 CVE-2020-3880 · GHSA-w7gc-5xjf-f39v

Out-of-bounds read in Apple iOS and iPadOS

LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01385 Published 2020-10-27 Fixed in 13.3, 10.15 +1 CWE-125

TI-2020-07861 CVE-2020-9782 · GHSA-6p83-9xwf-m98p

Path traversal in Apple macOS

LOW 35

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01246 Published 2020-10-27 Fixed in 10.15 CWE-22

TI-2020-08032 CVE-2020-9961 · GHSA-95xf-8mj3-fjrv

Out-of-bounds read in Apple macOS

LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01591 Published 2020-10-27 Fixed in 10.15 CWE-125

TI-2020-03365 CVE-2020-3863 · GHSA-cq5m-4r98-mcfg

Out-of-bounds write in Apple macOS

LOW 37

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0133 Published 2020-10-27 Fixed in 10.15 CWE-787

TI-2020-07942 CVE-2020-9866 · GHSA-39x7-9p46-59cg

Buffer overflow in Apple macOS

MEDIUM 46

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01947 Published 2020-10-27 Fixed in 10.15 CWE-120

TI-2020-07865 CVE-2020-9786 · GHSA-mxjg-g936-fxqj

This issue was addressed with improved checks This issue is fixed in macOS Catalina…

LOW 17

This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00579 Published 2020-10-27 Fixed in 10.15

TI-2020-03353 CVE-2020-3851 · GHSA-rvmm-f3gg-cx63

Use after free in Apple macOS

LOW 35

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00779 Published 2020-10-27 Fixed in 10.15 CWE-416

TI-2020-03357 CVE-2020-3855 · GHSA-q83q-2xrr-g3r8

Apple macOS: A malicious application may be able to overwrite arbitrary files

LOW 32

An access issue was addressed with improved access restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00674 Published 2020-10-27 Fixed in 10.15

TI-2020-07854 CVE-2020-9774 · GHSA-v8pr-2ghj-3cwq

An issue existed with Siri Suggestions access to encrypted data.

LOW 34

An issue existed with Siri Suggestions access to encrypted data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0062 Published 2020-10-27 Fixed in 10.15 CWE-311

TI-2019-06416 CVE-2019-8858 · GHSA-2r6r-5g9f-358w

Apple macOS: A user who shares their screen may not be able to end screen sharing

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00707 Published 2020-10-27 Fixed in 10.15

TI-2019-06413 CVE-2019-8855 · GHSA-8rvj-596r-q45j

Apple macOS: A malicious application may be able to access restricted files

LOW 29

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00759 Published 2020-10-27 Fixed in 10.15

TI-2019-06412 CVE-2019-8854 · GHSA-wvw3-8wwp-x8x5

Apple tvOS: A device may be passively tracked by its Wi-Fi MAC address

LOW 35

A user privacy issue was addressed by removing the broadcast MAC address.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01168 Published 2020-10-27 Fixed in 13, 6 +1

TI-2019-06411 CVE-2019-8853 · GHSA-39rr-656j-h75w

Improper input validation in Apple macOS

LOW 26

A validation issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00843 Published 2020-10-27 Fixed in 10.15 CWE-20

TI-2019-06408 CVE-2019-8850 · GHSA-v39q-f9qx-cr43

Out-of-bounds read in Apple iOS and iPadOS

LOW 26

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00805 Published 2020-10-27 Fixed in 13.1, 13 +2 CWE-125

TI-2019-06414 CVE-2019-8856 · GHSA-mr2g-m2pj-f4jh

An API issue existed in the handling of outgoing phone calls initiated with Siri.

LOW 17

An API issue existed in the handling of outgoing phone calls initiated with Siri.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00683 Published 2020-10-27 Fixed in 13.3, 10.15 +1

TI-2019-06406 CVE-2019-8848 · GHSA-33rp-rjjm-5r9m

Apple iOS and iPadOS: An application may be able to gain elevated privileges

LOW 36

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01013 Published 2020-10-27 Fixed in 13.3, 10.15 +4

TI-2019-06410 CVE-2019-8852 · GHSA-xrc8-fqhc-595v

Out-of-bounds write in Apple macOS

LOW 39

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02794 Published 2020-10-27 Fixed in 10.15 CWE-787

TI-2019-06405 CVE-2019-8847 · GHSA-m8p6-3g2p-2m39

Out-of-bounds write in Apple macOS

LOW 37

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01353 Published 2020-10-27 Fixed in 10.15 CWE-787

TI-2019-06409 CVE-2019-8851 · GHSA-wh3h-j7h4-7983

Apple macOS: A Mac may not lock immediately upon wake

LOW 35

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00972 Published 2020-10-27 Fixed in 10.15

TI-2019-06398 CVE-2019-8838 · GHSA-pcv9-74p8-5f2v

Out-of-bounds write in Apple iOS and iPadOS

LOW 37

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01357 Published 2020-10-27 Fixed in 13.3, 10.15 +1 CWE-787

TI-2019-06402 CVE-2019-8842 · GHSA-3fhw-2p9h-rjgc

Buffer overflow in Apple macOS

LOW 20

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.02031 Published 2020-10-27 Fixed in 10.15 CWE-120

Vulnerabilities

Filters