Vulnerabilities

TI-2020-07864 CVE-2020-9785 · GHSA-jh6j-rjp5-82rm

Out-of-bounds write in Apple iOS

LOW 37

Multiple memory corruption issues were addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01283 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2 CWE-787

TI-2020-07862 CVE-2020-9783 · GHSA-hwpw-whxv-42xc

Use after free in Apple iOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01291 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-416

TI-2020-07859 CVE-2020-9780 · GHSA-3vpf-jm66-7hfx

The issue was resolved by clearing application previews when content is deleted.

LOW 16

The issue was resolved by clearing application previews when content is deleted.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00258 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4 CWE-212

TI-2020-07860 CVE-2020-9781 · GHSA-jh47-734f-wqhr

Apple iOS: A user may grant website permissions to a site they didn't intend to

LOW 25

The issue was addressed by clearing website permission prompts after navigation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00762 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4 CWE-281

TI-2020-07850 CVE-2020-9770 · GHSA-f9h7-x4m7-p8mw

Apple iOS: An attacker in a privileged network position may be able to intercept…

LOW 31

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01198 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4

TI-2020-07857 CVE-2020-9777 · GHSA-g4wq-2fwh-fwpw

An issue existed in the selection of video file by Mail.

LOW 25

An issue existed in the selection of video file by Mail.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00802 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4

TI-2020-07855 CVE-2020-9775 · GHSA-4w4v-9f8x-9pv8

An issue existed in the handling of tabs displaying picture in picture video.

LOW 26

An issue existed in the handling of tabs displaying picture in picture video.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0088 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4 CWE-665

TI-2020-07848 CVE-2020-9768 · GHSA-9rq9-2gch-9x2q

Use after free in Apple iOS

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01279 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4 +1 CWE-416

TI-2020-03419 CVE-2020-3919 · GHSA-vg3r-gmcv-9287

Apple iOS: A malicious application may be able to execute arbitrary code with kernel…

LOW 37

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01427 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2 CWE-665

TI-2020-03410 CVE-2020-3910 · GHSA-x64x-rrww-g377

Buffer overflow in Apple iOS

MEDIUM 45

A buffer overflow was addressed with improved size validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01639 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +5 CWE-120

TI-2020-03417 CVE-2020-3917 · GHSA-w2xc-2255-85hm

Apple iOS: An application may be able to use an SSH client provided by private frameworks

LOW 25

This issue was addressed with a new entitlement.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00308 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4 +1

TI-2020-03414 CVE-2020-3914 · GHSA-9835-5c9g-4pxf

Memory leak in Apple iOS

LOW 26

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00773 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2 CWE-401

TI-2020-03411 CVE-2020-3911 · GHSA-4736-pcjr-h7qf

Buffer overflow in Apple iOS

MEDIUM 45

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01641 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +5 CWE-120

TI-2020-03416 CVE-2020-3916 · GHSA-3q67-g228-h5qx

Apple iOS: Setting an alternate app icon may disclose a photo without needing permission…

LOW 26

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0081 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2

TI-2020-03413 CVE-2020-3913 · GHSA-chmc-gg3m-2h26

A permissions issue existed.

LOW 35

A permissions issue existed.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00733 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +1

TI-2020-03409 CVE-2020-3909 · GHSA-whm7-8425-m86f

Buffer overflow in Apple iOS

MEDIUM 48

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03039 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +5 CWE-120

TI-2020-03402 CVE-2020-3902 · GHSA-3pw6-wvqq-cwg5

Cross-site scripting in Apple iOS

LOW 30

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01153 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-79

TI-2020-03401 CVE-2020-3901 · GHSA-rqcj-mh6f-fw77

Type confusion in Apple iOS

MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0188 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-843

TI-2020-03400 CVE-2020-3900 · GHSA-3frw-3f6f-6qx4

Out-of-bounds write in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01824 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-787

TI-2020-03395 CVE-2020-3895 · GHSA-cq67-m6v6-w4gx

Out-of-bounds write in Apple iOS

MEDIUM 43

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02673 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-787

TI-2020-03399 CVE-2020-3899 · GHSA-r89q-c9hq-6hvp

Apple iOS: A remote attacker may be able to cause arbitrary code execution

MEDIUM 45

A memory consumption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04117 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5

TI-2020-03394 CVE-2020-3894 · GHSA-86x5-95qc-wmgh

Race condition in Apple iOS

LOW 17

A race condition was addressed with additional validation.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.01061 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-362

TI-2020-03397 CVE-2020-3897 · GHSA-gqfj-ph97-xjrx

Type confusion in Apple iOS

MEDIUM 45

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04479 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-843

TI-2020-03391 CVE-2020-3891 · GHSA-c887-fjhv-3qfj

Apple iOS: A person with physical access to a locked iOS device may be able to respond to…

LOW 12

A logic issue was addressed with improved state management.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00297 Published 2020-04-01 Fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2

TI-2020-03385 CVE-2020-3885 · GHSA-mqcp-c96v-gj7w

Apple iOS: A file URL may be incorrectly processed

LOW 23

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0164 Published 2020-04-01 Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +4 CWE-670

Vulnerabilities

Filters