deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-27195
Published: 2020-10-22
Description: HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/hashicorp/nomad/blob/master/CHANGELOG.md#0126-october-21-2020; https://www.nomadproject.io/downloads; https://github.com/hashicorp/nomad/blob/master/CHANGELOG.md#0126-october-21-2020
CVE: CVE-2020-7020
Published: 2020-10-22
Description: Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain complex queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.
CVSS Score: 3.1 (LOW)
CWE: CWE-270, CWE-269
References: https://discuss.elastic.co/t/elastic-stack-7-9-3-and-6-8-13-security-update/253033; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://staging-website.elastic.co/community/security/
CVE: CVE-2020-15906
Published: 2020-10-22
Description: tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: http://packetstormsecurity.com/files/159663/Tiki-Wiki-CMS-Groupware-21.1-Authentication-Bypass.html; https://info.tiki.org/article473-Security-Releases-of-all-Tiki-versions-since-16-3; http://packetstormsecurity.com/files/159663/Tiki-Wiki-CMS-Groupware-21.1-Authentication-Bypass.html
CVE: CVE-2020-3898
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211100
CVE: CVE-2020-3915
Published: 2020-10-22
Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to overwrite arbitrary files.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211100
CVE: CVE-2020-3918
Published: 2020-10-22
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A local user may be able to view sensitive user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211101; https://support.apple.com/kb/HT211102
CVE: CVE-2020-9771
Published: 2020-10-22
Description: This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system.
CVSS Score: 7.1 (HIGH)
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211100
CVE: CVE-2020-9772
Published: 2020-10-22
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211101; https://support.apple.com/kb/HT211102
CVE: CVE-2020-9779
Published: 2020-10-22
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211100
CVE: CVE-2020-9787
Published: 2020-10-22
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211101; https://support.apple.com/kb/HT211102
CVE: CVE-2020-9796
Published: 2020-10-22
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/kb/HT211170; https://support.apple.com/kb/HT211170
CVE: CVE-2020-9810
Published: 2020-10-22
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.5. A person with physical access to a Mac may be able to bypass Login Window.
CVSS Score: 6.8 (MEDIUM)
References: https://support.apple.com/kb/HT211170; https://support.apple.com/kb/HT211170
CVE: CVE-2020-9828
Published: 2020-10-22
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to leak sensitive user information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211100
CVE: CVE-2020-9853
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to determine kernel memory layout.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://support.apple.com/kb/HT211100; https://support.apple.com/kb/HT211100
CVE: CVE-2020-9854
Published: 2020-10-22
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/kb/HT211168; https://support.apple.com/kb/HT211170; https://support.apple.com/kb/HT211171
CVE: CVE-2020-9863
Published: 2020-10-22
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9868
Published: 2020-10-22
Description: A certificate validation issue existed when processing administrator added certificates. This issue was addressed with improved certificate validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. An attacker may have been able to impersonate a trusted website using shared key material for an administrator added certificate.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9869
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A remote attacker may cause an unexpected application termination.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9871
Published: 2020-10-22
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9872
Published: 2020-10-22
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9873
Published: 2020-10-22
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9874
Published: 2020-10-22
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9875
Published: 2020-10-22
Description: An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9876
Published: 2020-10-22
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/32; http://seclists.org/fulldisclosure/2020/Nov/19; http://seclists.org/fulldisclosure/2020/Nov/20
CVE: CVE-2020-9877
Published: 2020-10-22
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9879
Published: 2020-10-22
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9880
Published: 2020-10-22
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9881
Published: 2020-10-22
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211291
CVE: CVE-2020-9882
Published: 2020-10-22
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211291
CVE: CVE-2020-9883
Published: 2020-10-22
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9887
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. Viewing a maliciously crafted JPEG file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9892
Published: 2020-10-22
Description: Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9898
Published: 2020-10-22
Description: This issue was addressed with improved entitlements. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211288
CVE: CVE-2020-9899
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9900
Published: 2020-10-22
Description: An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2019-16127
Published: 2020-10-22
Description: Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-190
References: https://census-labs.com/news/2020/10/21/microchip-asf4-integer-overflows-in-flash_read-flash_write-and-flash_append/; https://www.microchip.com/mplab/avr-support/advanced-software-framework; https://www.openwall.com/lists/oss-security/2020/10/22/1
CVE: CVE-2019-16129
Published: 2020-10-22
Description: Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 2 of 2).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2020/10/22/1; https://census-labs.com/news/2020/10/21/microchip-cryptoauthlib-atcab_genkey_base-buffer-overflow/; https://www.microchip.com/design-centers/security-ics/cryptoauthentication
CVE: CVE-2020-27664
Published: 2020-10-22
Description: admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/strapi/strapi/pull/8442; https://github.com/strapi/strapi/releases/tag/v3.2.5; https://github.com/strapi/strapi/pull/8442
CVE: CVE-2020-27665
Published: 2020-10-22
Description: In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-builder) routes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://github.com/strapi/strapi/pull/8439; https://github.com/strapi/strapi/releases/tag/v3.2.5; https://github.com/strapi/strapi/pull/8439
CVE: CVE-2020-27666
Published: 2020-10-22
Description: Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/strapi/strapi/pull/8440; https://github.com/strapi/strapi/releases/tag/v3.2.5; https://github.com/strapi/strapi/pull/8440
CVE: CVE-2020-9901
Published: 2020-10-22
Description: An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9902
Published: 2020-10-22
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to determine kernel memory layout.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9904
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9905
Published: 2020-10-22
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. A remote attacker may be able to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9906
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-787
References: http://packetstormsecurity.com/files/162119/iOS-macOS-Radio-Proximity-Kernel-Memory-Corruption.html; https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9908
Published: 2020-10-22
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9919
Published: 2020-10-22
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9920
Published: 2020-10-22
Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A malicious mail server may overwrite arbitrary mail files.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211291
CVE: CVE-2020-9921
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-787
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9924
Published: 2020-10-22
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6. A remote attacker may be able to cause a denial of service.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9927
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9928
Published: 2020-10-22
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9929
Published: 2020-10-22
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9935
Published: 2020-10-22
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6. A user may be unexpectedly logged in to another user’s account.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289