deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-27901
Published: 2021-04-02
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27907
Published: 2021-04-02
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27908
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211930
CVE: CVE-2020-27914
Published: 2021-04-02
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27915
Published: 2021-04-02
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27919
Published: 2021-04-02
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27920
Published: 2021-04-02
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing maliciously crafted web content may lead to code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211930
CVE: CVE-2020-27921
Published: 2021-04-02
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27922
Published: 2021-04-02
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211930
CVE: CVE-2020-27923
Published: 2021-04-02
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211930
CVE: CVE-2020-27924
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211930
CVE: CVE-2020-27931
Published: 2021-04-02
Description: A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-27933
Published: 2021-04-02
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, iCloud for Windows 7.20, watchOS 6.2.8, tvOS 13.4.8, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211288; https://support.apple.com/en-us/HT211289; https://support.apple.com/en-us/HT211290
CVE: CVE-2020-27935
Published: 2021-04-02
Description: Multiple issues were addressed with improved logic. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 6.3 (MEDIUM)
References: https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211930
CVE: CVE-2020-27936
Published: 2021-04-02
Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-27937
Published: 2021-04-02
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to access private information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27938
Published: 2021-04-02
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-27939
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-27941
Published: 2021-04-02
Description: A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-27943
Published: 2021-04-02
Description: A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in tvOS 14.3, iOS 14.3 and iPadOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.2. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-27944
Published: 2021-04-02
Description: A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-27945
Published: 2021-04-02
Description: An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.0.1. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27946
Published: 2021-04-02
Description: An information disclosure issue was addressed with improved state management. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-27947
Published: 2021-04-02
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-27948
Published: 2021-04-02
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-27949
Published: 2021-04-02
Description: This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may cause unexpected changes in memory belonging to processes traced by DTrace.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-27951
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212004; https://support.apple.com/en-us/HT212006
CVE: CVE-2020-27952
Published: 2021-04-02
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-29608
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, watchOS 7.2. A remote attacker may be able to leak memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-29610
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may disclose restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-29611
Published: 2021-04-02
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-29612
Published: 2021-04-02
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-29613
Published: 2021-04-02
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.3 and iPadOS 14.3. An enterprise application installation prompt may display the wrong domain.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212003
CVE: CVE-2020-29614
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted file may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-29615
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted image may lead to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-29616
Published: 2021-04-02
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-29617
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-29618
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-29619
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-29620
Published: 2021-04-02
Description: This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-29621
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-29623
Published: 2021-04-02
Description: "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete browsing history.
CVSS Score: 3.3 (LOW)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/; https://security.gentoo.org/glsa/202104-03
CVE: CVE-2020-29624
Published: 2021-04-02
Description: A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212003; https://support.apple.com/en-us/HT212005; https://support.apple.com/en-us/HT212009
CVE: CVE-2020-29625
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-29633
Published: 2021-04-02
Description: An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An attacker in a privileged network position may be able to bypass authentication policy.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/HT212011; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212011
CVE: CVE-2020-29639
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT211850; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9926
Published: 2021-04-02
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iCloud for Windows 7.20, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT211288; https://support.apple.com/en-us/HT211289; https://support.apple.com/en-us/HT211290