Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Release: Apple Safari 13.0 Clear all filters
TI-2020-08005 CVE-2020-9932 · GHSA-w848-4qq3-q4r3

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 40

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01172 Published 2020-10-27 Fixed in 13.1, 13 +1 CWE-787
TI-2020-03366 CVE-2020-3864 · GHSA-wwr3-9qhx-q62f

Origin validation error in Apple iOS and iPadOS

Priority LOW 34

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00404 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-346
TI-2020-03354 CVE-2020-3852 · GHSA-x52p-3288-cq6p

Incorrect authorization in Apple Safari

Priority LOW 26

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00973 Published 2020-10-27 Fixed in 13.0 CWE-863
TI-2019-06404 CVE-2019-8846 · GHSA-69vj-962m-hmhv

Use after free in Apple iOS and iPadOS

Priority MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02243 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-416
TI-2019-06403 CVE-2019-8844 · GHSA-278v-44j3-pqxv

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02182 Published 2020-10-27 Partial fix · 13.3, 6.1 +4 CWE-787
TI-2019-06395 CVE-2019-8835 · GHSA-p64v-jc94-867w

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02023 Published 2020-10-27 Partial fix · 13.3, 13.0 +3 CWE-787
TI-2019-06336 CVE-2019-8773 · GHSA-5gp5-jqc5-m4v7

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01417 Published 2020-10-27 Fixed in 13.1, 13 +5 CWE-787
TI-2019-06334 CVE-2019-8771 · GHSA-w6pm-jp6h-x3pq

Clickjacking in Apple Safari

Priority LOW 29

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00995 Published 2020-10-27 Partial fix · 13.0, 13 CWE-1021
TI-2019-06314 CVE-2019-8751 · GHSA-4467-qcwr-q357

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01607 Published 2020-10-27 Fixed in 13.1, 13 +5 CWE-787
TI-2019-06325 CVE-2019-8762 · GHSA-3fh9-4r73-52mw

Cross-site scripting in Apple iOS and iPadOS

Priority LOW 28

A validation issue was addressed with improved logic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00694 Published 2020-10-27 Fixed in 13.1, 13 +4 CWE-79
TI-2019-06315 CVE-2019-8752 · GHSA-xp7g-78mw-jp2h

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01417 Published 2020-10-27 Fixed in 13.1, 13 +5 CWE-787