Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-9894 1Apple 7Icloud IpadosIphone Os+4 more Jun 17, 2026 Oct 16, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.Show less
CVE-2020-9893 1Apple 7Icloud IpadosIphone Os+4 more Jun 17, 2026 Oct 16, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iClou...Show more A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.Show less
CVE-2020-9891 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Oct 16, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-9890 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Oct 16, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-9889 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Oct 16, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file m...Show more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-9888 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Oct 16, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-9885 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Oct 16, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue existed in the handling of iMessage tapbacks. The issue was resolved with additional verification. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A user that...Show more An issue existed in the handling of iMessage tapbacks. The issue was resolved with additional verification. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A user that is removed from an iMessage group could rejoin the group.Show less
CVE-2020-9884 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Oct 16, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file m...Show more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.Show less
CVE-2020-9878 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Oct 16, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted USD file may lead...Show more A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.Show less
CVE-2020-9870 1Apple 4Ipados Iphone OsMac Os X+1 more Jun 17, 2026 Oct 16, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A logic issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. An attacker with memory write capability may be able to bypass pointer authentic...Show more A logic issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code.Show less
CVE-2020-9865 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Oct 16, 2020 N/A· v4 8.6 HIGH· v3 6.8 MEDIUM· v2 A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to break o...Show more A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to break out of its sandbox.Show less
CVE-2020-9864 1Apple 1Mac Os X Jun 17, 2026 Oct 16, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.
CVE-2020-9862 1Apple 7Icloud IpadosIphone Os+4 more Jun 17, 2026 Oct 16, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows,...Show more A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Copying a URL from Web Inspector may lead to command injection.Show less
CVE-2020-9799 1Apple 1Mac Os X Jun 17, 2026 Oct 16, 2020 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges.
CVE-2020-24721 2Apple Google 2Exposure Notifications Exposure Notifications Jun 17, 2026 Sep 30, 2020 N/A· v4 5.7 MEDIUM· v3 3.3 LOW· v2 An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a position where he or she can...Show more An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a position where he or she can be coerced into proving or disproving an exposure notification, because of the persistent state of a private framework.Show less
CVE-2020-6514 6Apple CanonicalDebian+3 more 11Backports Sle ChromeDebian Linux+8 more Jun 17, 2026 Jul 22, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
CVE-2020-15358 5Apple CanonicalOracle+2 more 16Communications Cloud Native Core Policy Communications Messaging ServerCommunications Network Charging And Control+13 more Jun 17, 2026 Jun 27, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVE-2020-14155 6Apple GitlabNetapp+3 more 15Active Iq Unified Manager Cloud BackupClustered Data Ontap+12 more Jun 17, 2026 Jun 15, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
CVE-2019-20838 3Apple PcreSplunk 3Macos PcreUniversal Forwarder Jun 17, 2026 Jun 15, 2020 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
CVE-2020-9858 1Apple 1Windows Migration Assistant Jun 17, 2026 Jun 9, 2020 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary co...Show more A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.Show less

Previous 1...184185186...443 Next