← Back

Macos

macos

Vendor: Apple • 2,755 CVEs

CVEs (2,755)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36222
3Apple
DebianOpenldap
4Debian Linux
Mac Os XMacos+1 more
Jun 17, 2026
Jan 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
CVE-2020-36221
3Apple
DebianOpenldap
4Debian Linux
Mac Os XMacos+1 more
Jun 17, 2026
Jan 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
CVE-2020-8286
8Apple
DebianFedoraproject+5 more
17Clustered Data Ontap
Communications Billing And Revenue ManagementCommunications Cloud Native Core Policy+14 more
Jun 17, 2026
Dec 14, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8285
9Apple
DebianFedoraproject+6 more
22Clustered Data Ontap
Communications Billing And Revenue ManagementCommunications Cloud Native Core Policy+19 more
Jun 17, 2026
Dec 14, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
CVE-2020-8284
9Apple
DebianFedoraproject+6 more
22Clustered Data Ontap
Communications Billing And Revenue ManagementCommunications Cloud Native Core Policy+19 more
Jun 17, 2026
Dec 14, 2020
N/A· v4
3.7 LOW· v3
4.3 MEDIUM· v2
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherw...Show more
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.Show less
CVE-2020-13520
2Apple
Pixar
2Macos
Openusd
Jun 17, 2026
Dec 11, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which c...Show more
An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.Show less
CVE-2020-27918
4Apple
DebianFedoraproject+1 more
11Debian Linux
FedoraIcloud+8 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 fo...Show more
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2020-27896
1Apple
2Mac Os X
Macos
Jun 17, 2026
Dec 8, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to modify the file system.
CVE-2020-27950
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS...Show more
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.Show less
CVE-2020-27932
1Apple
7Icloud
IpadosIphone Os+4 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojav...Show more
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2020-27930
1Apple
5Ipados
Iphone OsMac Os X+2 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006...Show more
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processing a maliciously crafted font may lead to arbitrary code execution.Show less
CVE-2020-27927
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted font file may lead...Show more
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted font file may lead to arbitrary code execution.Show less
CVE-2020-27917
1Apple
7Icloud
IpadosIphone Os+4 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Proc...Show more
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to code execution.Show less
CVE-2020-27916
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to...Show more
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-27912
1Apple
7Icloud
IpadosIphone Os+4 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Proce...Show more
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.Show less
CVE-2020-27911
1Apple
7Icloud
IpadosIphone Os+4 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A rem...Show more
An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.Show less
CVE-2020-27910
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to a...Show more
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-27909
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code executio...Show more
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-27906
1Apple
1Macos
Jun 17, 2026
Dec 8, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption.
CVE-2020-27904
1Apple
1Macos
Jun 17, 2026
Dec 8, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privi...Show more
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.Show less