Vulnerabilities

TI-2020-08009 CVE-2020-9936 · GHSA-4c35-9qwv-fj5v

Out-of-bounds write in Apple iOS

LOW 37

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01324 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +5 CWE-787

TI-2020-08007 CVE-2020-9934 · GHSA-x5m3-93g8-f3rh

An issue existed in the handling of environment variables.

HIGH 82KEV

An issue existed in the handling of environment variables.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.03208 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6

TI-2020-08006 CVE-2020-9933 · GHSA-76mp-7869-8fcw

Apple iOS: A malicious application may be able to read sensitive location information

LOW 18

An authorization issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0084 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +1

TI-2020-08004 CVE-2020-9931 · GHSA-q526-jhq6-8w54

Improper input validation in Apple iOS

LOW 36

A denial of service issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01587 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6 CWE-20

TI-2020-07998 CVE-2020-9925 · GHSA-mqp2-6xg4-x69p

Cross-site scripting in Apple iOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01274 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-79

TI-2020-07996 CVE-2020-9923 · GHSA-7pvq-7fpx-47jm

Out-of-bounds write in Apple iOS

LOW 37

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0123 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, watchOS 6.2.8 CWE-787

TI-2020-07990 CVE-2020-9917 · GHSA-3xgm-ccxm-hpw6

Apple iOS: A remote attacker may be able to cause a denial of service

LOW 36

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01587 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6

TI-2020-07989 CVE-2020-9916 · GHSA-xjv7-588c-8c3p

Apple iOS: A malicious attacker may be able to conceal the destination of a URL

LOW 27

A URL Unicode encoding issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01377 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5

TI-2020-07988 CVE-2020-9915 · GHSA-9p56-8h6v-343m

An access issue existed in Content Security Policy.

LOW 32

An access issue existed in Content Security Policy.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01504 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5

TI-2020-07987 CVE-2020-9914 · GHSA-hg47-5j2j-pgvc

Improper input validation in Apple iOS

LOW 35

An input validation issue existed in Bluetooth.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01236 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 CWE-20

TI-2020-07984 CVE-2020-9911 · GHSA-2f5h-28fw-gwx2

Apple iOS: An issue in Safari Reader mode may allow a remote attacker to bypass the Same…

LOW 36

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0146 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2

TI-2020-07983 CVE-2020-9910 · GHSA-mhx4-5j7f-6rxc

Apple iOS: A malicious attacker with arbitrary read and write capability may be able to…

MEDIUM 42

Multiple issues were addressed with improved logic.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0219 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5

TI-2020-07982 CVE-2020-9909 · GHSA-c4wh-283h-v2vf

Out-of-bounds read in Apple iOS

LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01796 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +1 CWE-125

TI-2020-07980 CVE-2020-9907 · GHSA-x2gp-c4cv-7chc

Out-of-bounds write in Apple iOS

CRITICAL 93KEV

A memory corruption issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03199 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 CWE-787

TI-2020-07976 CVE-2020-9903 · GHSA-8pc2-fr94-f97q

Origin validation error in Apple iOS

LOW 33

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00507 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2 CWE-346

TI-2020-07969 CVE-2020-9895 · GHSA-j4v5-6jrm-p9fx

Use after free in Apple iOS

MEDIUM 49

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04491 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416

TI-2020-07968 CVE-2020-9894 · GHSA-cgf9-hgh6-4hrm

Out-of-bounds read in Apple iOS

LOW 25

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02837 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-125

TI-2020-07967 CVE-2020-9893 · GHSA-8m3c-93m2-83h7

Use after free in Apple iOS

MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02949 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416

TI-2020-07965 CVE-2020-9891 · GHSA-84fj-q65v-gcw2

Out-of-bounds read in Apple iOS

LOW 37

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01229 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +2 CWE-125

TI-2020-07964 CVE-2020-9890 · GHSA-63g4-37mq-jwrp

Out-of-bounds read in Apple iOS

LOW 37

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01234 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +2 CWE-125

TI-2020-07963 CVE-2020-9889 · GHSA-h5hg-4532-wfr5

Out-of-bounds write in Apple iOS

LOW 38

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01757 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +2 CWE-787

TI-2020-07962 CVE-2020-9888 · GHSA-6x99-3q2r-3vgx

Out-of-bounds read in Apple iOS

LOW 36

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01203 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +2 CWE-125

TI-2020-07960 CVE-2020-9885 · GHSA-mwr9-mrq7-g9xf

Insufficient verification of data authenticity in Apple iOS

LOW 25

An issue existed in the handling of iMessage tapbacks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00446 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +2 CWE-345

TI-2020-07959 CVE-2020-9884 · GHSA-xxp5-8cpw-353h

Out-of-bounds write in Apple iOS

LOW 36

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01062 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +2 CWE-787

TI-2020-07953 CVE-2020-9878 · GHSA-79qx-97vr-8gxv

Buffer overflow in Apple iOS

LOW 37

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01323 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +2 CWE-120

Vulnerabilities

Filters