Priority LOW 37
An out-of-bounds read was addressed with improved input validation.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01385 · Published 2020-10-27 · Fixed in 13.3, 10.15 +1 CWE-125
Priority LOW 34
A logic issue was addressed with improved validation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2020-10-27 · Partial fix · 13.3, 13.0 +3 CWE-346
Priority LOW 21
An information disclosure issue existed in the handling of the Storage Access API.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00766 · Published 2020-10-27 · Fixed in 13.3, 13.0 +1
Priority MEDIUM 42
A use after free issue was addressed with improved memory management.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02243 · Published 2020-10-27 · Partial fix · 13.3, 13.0 +3 CWE-416
Priority LOW 16
The issue was addressed with improved validation when an iCloud Link is created.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00299 · Published 2020-10-27 · Fixed in 13.3 CWE-20
Priority LOW 17
An API issue existed in the handling of outgoing phone calls initiated with Siri.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00683 · Published 2020-10-27 · Fixed in 13.3, 10.15 +1
Priority LOW 36
This issue was addressed with improved checks.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01013 · Published 2020-10-27 · Fixed in 13.3, 10.15 +4
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01353 · Published 2020-10-27 · Fixed in 13.3, 6.1 CWE-787
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01357 · Published 2020-10-27 · Fixed in 13.3, 10.15 +1 CWE-787
Priority MEDIUM 42
Multiple memory corruption issues were addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02182 · Published 2020-10-27 · Partial fix · 13.3, 6.1 +4 CWE-787
Priority LOW 34
An information disclosure issue was addressed by removing the vulnerable code.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00414 · Published 2020-10-27 · Fixed in 13.3
Priority LOW 37
A memory corruption issue was addressed by removing the vulnerable code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01357 · Published 2020-10-27 · Fixed in 13.3, 10.15 +1 CWE-787
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01357 · Published 2020-10-27 · Fixed in 13.3, 10.15 +1 CWE-787
Priority MEDIUM 42
An out-of-bounds read was addressed with improved input validation.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02236 · Published 2020-10-27 · Fixed in 13.3, 12.4 +3 CWE-125
Priority MEDIUM 42
Multiple memory corruption issues were addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02023 · Published 2020-10-27 · Partial fix · 13.3, 13.0 +3 CWE-787
Priority LOW 22
A configuration issue was addressed with additional restrictions.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01172 · Published 2020-10-27 · Fixed in 13.3, 10.15 +4
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01311 · Published 2020-10-27 · Fixed in 13.3, 10.15 +1 CWE-787