Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: Apple iCloud for Windows, iCloud for Windows (Legacy), iTunes for Windows iCloud for Windows 11.3, iCloud for Windows 7.20, iTunes 12.10.8 for Windows Clear all filters
TI-2020-08009 CVE-2020-9936 · GHSA-4c35-9qwv-fj5v

Out-of-bounds write in Apple iOS

Priority LOW 37

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01324 Published 2020-10-16 Fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6 +5 CWE-787
TI-2020-07998 CVE-2020-9925 · GHSA-mqp2-6xg4-x69p

Cross-site scripting in Apple iOS

Priority LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01274 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-79
TI-2020-07988 CVE-2020-9915 · GHSA-9p56-8h6v-343m

An access issue existed in Content Security Policy.

Priority LOW 32

An access issue existed in Content Security Policy.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01504 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5
TI-2020-07969 CVE-2020-9895 · GHSA-j4v5-6jrm-p9fx

Use after free in Apple iOS

Priority MEDIUM 49

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04491 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416
TI-2020-07968 CVE-2020-9894 · GHSA-cgf9-hgh6-4hrm

Out-of-bounds read in Apple iOS

Priority LOW 25

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02837 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-125
TI-2020-07967 CVE-2020-9893 · GHSA-8m3c-93m2-83h7

Use after free in Apple iOS

Priority MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02949 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416
TI-2020-07938 CVE-2020-9862 · GHSA-qv6h-hj4m-385f

Improper output encoding in Apple iOS

Priority LOW 38

A command injection issue existed in Web Inspector.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01922 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-116