Vulnerabilities

TI-2020-08062 CVE-2020-9992 · GHSA-xvpf-r299-6m5q

Apple iOS: An attacker in a privileged network position may be able to execute arbitrary…

LOW 39

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02986 Published 2020-10-16 Fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0

TI-2020-08046 CVE-2020-9976 · GHSA-x4f7-hgxg-q85h

LOW 27

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01092 Published 2020-10-16 Fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0 +1

TI-2020-08039 CVE-2020-9968 · GHSA-2fxr-jg3c-h45h

LOW 27

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01161 Published 2020-10-16 Fixed in iOS 14.0 and iPadOS 14.0, macOS Catalina 10.15.7 +2

TI-2020-08035 CVE-2020-9964 · GHSA-4pp8-9mjg-pq9p

LOW 25

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00406 Published 2020-10-16 Fixed in iOS 14.0 and iPadOS 14.0 CWE-665

TI-2020-08030 CVE-2020-9959 · GHSA-75wm-6772-rqf5

LOW 12

A lock screen issue allowed access to messages on a locked device.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00282 Published 2020-10-16 Fixed in iOS 14.0 and iPadOS 14.0 CWE-667

TI-2020-08029 CVE-2020-9958 · GHSA-ggv4-hh76-gfg8

LOW 36

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01131 Published 2020-10-16 Fixed in iOS 14.0 and iPadOS 14.0 CWE-787

TI-2020-08025 CVE-2020-9952 · GHSA-2hf4-pxq2-63h5

LOW 34

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01497 Published 2020-10-16 Partial fix · iOS 14.0 and iPadOS 14.0, tvOS 14.0 +4 CWE-79

TI-2020-08019 CVE-2020-9946 · GHSA-f266-qpmf-vxqx

LOW 30

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00307 Published 2020-10-16 Fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0 CWE-667