Priority LOW 37
An out-of-bounds read was addressed with improved input validation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02047 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3, watchOS 6.1.2 CWE-125
Priority LOW 26
A validation issue was addressed with improved input sanitization.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00805 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-125
Priority LOW 26
A memory initialization issue was addressed with improved memory handling.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00805 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-665
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0133 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3 CWE-787
Priority LOW 36
An out-of-bounds read was addressed with improved input validation.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01149 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-125
Priority LOW 26
This was addressed with additional checks by Gatekeeper on files mounted through a network share.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00681 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3
Priority LOW 34
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-787
Priority LOW 36
A memory corruption issue was addressed with improved input validation.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0092 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-20
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01394 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3 CWE-787
Priority LOW 37
A type confusion issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01339 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-843
Priority MEDIUM 42
A buffer overflow was addressed with improved size validation.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01776 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +5 CWE-119
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0133 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3 CWE-787
Priority LOW 37
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01347 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-787
Priority LOW 36
An off by one issue existed in the handling of racoon configuration files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01136 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +1 CWE-119
Priority LOW 25
A validation issue was addressed with improved input sanitization.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00345 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3 CWE-20
Priority LOW 37
The issue was addressed with improved permissions logic.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0153 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-276
Priority CRITICAL 93KEV
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.14774 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-787
Priority LOW 25
An access issue was addressed with improved memory management.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00325 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2
Priority LOW 20
A validation issue existed in the handling of symlinks.
CVSS 3.1MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00334 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3 CWE-59
Priority LOW 16
A validation issue existed in the handling of symlinks.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3 CWE-59
Priority LOW 36
An out-of-bounds read was addressed with improved bounds checking.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0092 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +2 CWE-125
Priority LOW 37
A memory corruption issue was addressed with improved input validation.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01376 · Published 2020-02-27 · Fixed in macOS Catalina 10.15.3 CWE-787
Priority LOW 36
An out-of-bounds read was addressed with improved input validation.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01188 · Published 2020-02-27 · Fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3 +5 CWE-125