deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11106
Published: 2020-04-01
Description: NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to 6.5.3.5; WC7600v2, running firmware versions prior to 6.5.3.5; and WC9500, running firmware versions prior to 6.5.3.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://kb.netgear.com/000058243/Security-Advisory-for-Pre-Authentication-Command-Injection-in-request-handler-php-on-Some-Wireless-Controllers-PSV-2018-0051; https://kb.netgear.com/000058243/Security-Advisory-for-Pre-Authentication-Command-Injection-in-request-handler-php-on-Some-Wireless-Controllers-PSV-2018-0051
CVE: CVE-2019-3942
Published: 2020-04-01
Description: Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-522
References: https://www.tenable.com/security/research/tra-2019-15; https://www.tenable.com/security/research/tra-2019-15
CVE: CVE-2019-3944
Published: 2020-04-01
Description: Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://www.tenable.com/security/research/tra-2019-22; https://www.tenable.com/security/research/tra-2019-22
CVE: CVE-2019-3945
Published: 2020-04-01
Description: Web server running on Parrot ANAFI can be crashed due to the SDK command "Common_CurrentDateTime" being sent to control service with larger than expected date length.
CVSS Score: 7.5 (HIGH)
References: https://www.tenable.com/security/research/tra-2019-22; https://www.tenable.com/security/research/tra-2019-22
CVE: CVE-2020-10860
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. An Arbitrary Memory Address Overwrite vulnerability in the aswAvLog Log Library results in Denial of Service of the Avast Service (AvastSvc.exe).
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-10861
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Arbitrary File Deletion from Avast Program Path via RPC, when Self Defense is Enabled.
CVSS Score: 7.5 (HIGH)
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-10862
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Local Privilege Escalation (LPE) via RPC.
CVSS Score: 7.8 (HIGH)
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-10863
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine.
CVSS Score: 7.5 (HIGH)
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-10864
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to trigger a reboot via RPC from a Low Integrity process.
CVSS Score: 6.5 (MEDIUM)
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-10865
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to make arbitrary changes to the Components section of the Stats.ini file via RPC from a Low Integrity process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-829
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-10866
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to enumerate the network interfaces and access points from a Low Integrity process via RPC.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-10867
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to bypass intended access restrictions on tasks from an untrusted process, when Self Defense is enabled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-668
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-10868
Published: 2020-04-01
Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to launch the Repair App RPC call from a Low Integrity process.
CVSS Score: 7.5 (HIGH)
References: https://forum.avast.com/index.php?topic=232420.0; https://forum.avast.com/index.php?topic=232423.0; https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE: CVE-2020-3881
Published: 2020-04-01
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to view sensitive user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3883
Published: 2020-04-01
Description: This issue was addressed with improved checks. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. An application may be able to use arbitrary entitlements.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/HT211100; https://support.apple.com/HT211101; https://support.apple.com/HT211102
CVE: CVE-2020-3884
Published: 2020-04-01
Description: An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to cause arbitrary javascript code execution.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-74
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3885
Published: 2020-04-01
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-670
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211104
CVE: CVE-2020-3887
Published: 2020-04-01
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A download's origin may be incorrectly associated.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211104
CVE: CVE-2020-3888
Published: 2020-04-01
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4. A maliciously crafted page may interfere with other web contexts.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/HT211102; https://support.apple.com/HT211102
CVE: CVE-2020-3889
Published: 2020-04-01
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to read arbitrary files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3890
Published: 2020-04-01
Description: The issue was addressed with improved deletion. This issue is fixed in iOS 13.4 and iPadOS 13.4. Deleted messages groups may still be suggested as an autocompletion.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/HT211102; https://support.apple.com/HT211102
CVE: CVE-2020-3891
Published: 2020-04-01
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/HT211102; https://support.apple.com/HT211103; https://support.apple.com/HT211102
CVE: CVE-2020-3892
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3893
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3894
Published: 2020-04-01
Description: A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory.
CVSS Score: 3.1 (LOW)
CWE: CWE-362
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211104
CVE: CVE-2020-3895
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211103
CVE: CVE-2020-3897
Published: 2020-04-01
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211103
CVE: CVE-2020-3899
Published: 2020-04-01
Description: A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211104
CVE: CVE-2020-3900
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211103
CVE: CVE-2020-3901
Published: 2020-04-01
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211103
CVE: CVE-2020-3902
Published: 2020-04-01
Description: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211104
CVE: CVE-2020-3903
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.4. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3904
Published: 2020-04-01
Description: Multiple memory corruption issues were addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3905
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3906
Published: 2020-04-01
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.4. A maliciously crafted application may be able to bypass code signing enforcement.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3907
Published: 2020-04-01
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3908
Published: 2020-04-01
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3909
Published: 2020-04-01
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://support.apple.com/HT211100; https://support.apple.com/HT211101; https://support.apple.com/HT211102
CVE: CVE-2020-3910
Published: 2020-04-01
Description: A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://support.apple.com/HT211100; https://support.apple.com/HT211101; https://support.apple.com/HT211102
CVE: CVE-2020-3911
Published: 2020-04-01
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://support.apple.com/HT211100; https://support.apple.com/HT211101; https://support.apple.com/HT211102
CVE: CVE-2020-3912
Published: 2020-04-01
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-3913
Published: 2020-04-01
Description: A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, watchOS 6.2. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/HT211100; https://support.apple.com/HT211102; https://support.apple.com/HT211103
CVE: CVE-2020-3914
Published: 2020-04-01
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. An application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://support.apple.com/HT211100; https://support.apple.com/HT211101; https://support.apple.com/HT211102
CVE: CVE-2020-3916
Published: 2020-04-01
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. Setting an alternate app icon may disclose a photo without needing permission to access photos.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/HT211102; https://support.apple.com/HT211103; https://support.apple.com/HT211102
CVE: CVE-2020-3917
Published: 2020-04-01
Description: This issue was addressed with a new entitlement. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2. An application may be able to use an SSH client provided by private frameworks.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211103
CVE: CVE-2020-3919
Published: 2020-04-01
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://support.apple.com/HT211100; https://support.apple.com/HT211101; https://support.apple.com/HT211102
CVE: CVE-2020-9768
Published: 2020-04-01
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211103
CVE: CVE-2020-9769
Published: 2020-04-01
Description: Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple issues in Vim.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-9770
Published: 2020-04-01
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/HT211102; https://support.apple.com/HT211102
CVE: CVE-2020-9773
Published: 2020-04-01
Description: The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malicious application may be able to identify what other applications a user has installed.
CVSS Score: 3.3 (LOW)
References: http://seclists.org/fulldisclosure/2020/Nov/20; https://support.apple.com/HT211850; http://seclists.org/fulldisclosure/2020/Nov/20
CVE: CVE-2020-9775
Published: 2020-04-01
Description: An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/HT211102; https://support.apple.com/kb/HT211100; https://support.apple.com/HT211102
CVE: CVE-2020-9776
Published: 2020-04-01
Description: This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/HT211100; https://support.apple.com/HT211100
CVE: CVE-2020-9777
Published: 2020-04-01
Description: An issue existed in the selection of video file by Mail. The issue was fixed by selecting the latest version of a video. This issue is fixed in iOS 13.4 and iPadOS 13.4. Cropped videos may not be shared properly via Mail.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/HT211102; https://support.apple.com/HT211102
CVE: CVE-2020-9780
Published: 2020-04-01
Description: The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher.
CVSS Score: 3.3 (LOW)
CWE: CWE-212
References: https://support.apple.com/HT211102; https://support.apple.com/HT211102
CVE: CVE-2020-9781
Published: 2020-04-01
Description: The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user may grant website permissions to a site they didn't intend to.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-281
References: https://support.apple.com/HT211102; https://support.apple.com/HT211102