Vulnerabilities

TI-2020-16985 CVE-2020-27930 · GHSA-pcwp-p8jm-7xc7

Out-of-bounds write in Apple watchOS

CRITICAL 93KEV

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.22009 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-787

TI-2020-17004 CVE-2020-27950 · GHSA-76v6-7m6g-p6v4

HIGH 82KEV

A memory initialization issue was addressed.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.1652 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-665

TI-2020-16987 CVE-2020-27932 · GHSA-f3wv-rx3x-v6fh

CRITICAL 93KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.10337 Published 2020-12-08 Fixed in 7.1, 14.2 +6 CWE-843

TI-2020-08079 CVE-2020-10011 · GHSA-8j8h-xqgr-qmw7

LOW 36

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01212 Published 2020-12-08 Fixed in 10.15, 14.2 CWE-125

TI-2020-08051 CVE-2020-9981 · GHSA-6c7m-3c93-428j

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01409 Published 2020-12-08 Fixed in 14.0, 7.0 +3 CWE-416

TI-2020-08022 CVE-2020-9949 · GHSA-54xg-w6ch-fmhh

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01501 Published 2020-12-08 Fixed in 10.15, 14.0 +2 CWE-416

TI-2020-08026 CVE-2020-9954 · GHSA-h7h6-qvjq-8mhm

LOW 37

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0145 Published 2020-12-08 Fixed in 14.0, 7.0 +1 CWE-120

TI-2020-07995 CVE-2020-9922 · GHSA-wxpj-m284-3v3q

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.015 Published 2020-12-08 Fixed in 10.15