deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-13696
Published: 2020-06-08
Description: An issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to test for the existence of arbitrary files and to trigger an open on arbitrary files with mode O_RDWR. To achieve this, relative path components need to be added to the device path, as demonstrated by a v4l-conf -c /dev/../root/.bash_history command.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-863
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00013.html; http://www.openwall.com/lists/oss-security/2020/06/04/6
CVE: CVE-2020-5304
Published: 2020-06-08
Description: The dashboard in WhiteSource Application Vulnerability Management (AVM) before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data and false entries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: https://medium.com/%40venkatajayaram.yalla/whitesource-log-injection-vulnerability-cve-2020-5304-e543b7943c2b; https://www.whitesourcesoftware.com/oss_security_vulnerabilities/; https://medium.com/%40venkatajayaram.yalla/whitesource-log-injection-vulnerability-cve-2020-5304-e543b7943c2b
CVE: CVE-2020-8954
Published: 2020-06-08
Description: OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in the browser can be manipulated]
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-276
References: https://play.google.com/store/apps/details?id=de.marcel.opensearch&hl=en_US; https://raw.githubusercontent.com/marcelbohland/OpenSerach-CVE-SVE-reference-/master/CVE-list; https://play.google.com/store/apps/details?id=de.marcel.opensearch&hl=en_US
CVE: CVE-2020-10754
Published: 2020-06-08
Description: It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-306, CWE-306
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10754; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44FTVXWKDYIAMOOP2PZMUY3D2QNWAVBZ/; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10754
CVE: CVE-2020-13432
Published: 2020-06-08
Description: rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://hyp3rlinx.altervista.org/advisories/HFS-HTTP-FILE-SERVER-v2.3-REMOTE-BUFFER-OVERFLOW-DoS.txt; http://packetstormsecurity.com/files/157980/HFS-Http-File-Server-2.3m-Build-300-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2020/Jun/13
CVE: CVE-2019-19412
Published: 2020-06-08
Description: Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.
CVSS Score: 4.6 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en
CVE: CVE-2020-13428
Published: 2020-06-08
Description: A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=d5c43c21c747ff30ed19fcca745dea3481c733e0; https://github.com/videolan/vlc-3.0/releases/tag/3.0.11; https://github.com/videolan/vlc/commits/master/modules/packetizer/hxxx_nal.c
CVE: CVE-2020-13884
Published: 2020-06-08
Description: Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://github.com/hessandrew/CVE-2020-13884; https://support.citrix.com/article/CTX275460; https://github.com/hessandrew/CVE-2020-13884
CVE: CVE-2020-13885
Published: 2020-06-08
Description: Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://github.com/hessandrew/CVE-2020-13885; https://support.citrix.com/article/CTX275460; https://github.com/hessandrew/CVE-2020-13885
CVE: CVE-2020-13960
Published: 2020-06-08
Description: D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses (and also offer Internet services such as HTTP) for names that otherwise would have had an NXDOMAIN error, by registering a subdomain of the domain.name domain name.
CVSS Score: 7.5 (HIGH)
References: https://harigovind.org/articles/who-is-hijacking-my-nxdomains/; https://harigovind.org/articles/who-is-hijacking-my-nxdomains/
CVE: CVE-2020-4038
Published: 2020-06-08
Description: GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage() method could trigger this vulnerability. This has been patched in graphql-playground-html version 1.6.22. Note that some of the associated dependent middleware packages are also affected including but not limited to graphql-playground-middleware-express before version 1.7.16, graphql-playground-middleware-koa before version 1.6.15, graphql-playground-middleware-lambda before version 1.7.17, and graphql-playground-middleware-hapi before 1.6.13.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79
References: https://github.com/prisma-labs/graphql-playground#security-details; https://github.com/prisma-labs/graphql-playground/commit/bf1883db538c97b076801a[PII_REDACTED]6cb3cfb7; https://github.com/prisma-labs/graphql-playground/security/advisories/GHSA-4852-vrh7-28rf
CVE: CVE-2020-4040
Published: 2020-06-08
Description: Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized users could generate a preview. This has been fixed in Bolt 3.7.1
CVSS Score: 8.6 (HIGH)
CWE: CWE-352, CWE-352
References: http://packetstormsecurity.com/files/158299/Bolt-CMS-3.7.0-XSS-CSRF-Shell-Upload.html; http://seclists.org/fulldisclosure/2020/Jul/4; https://github.com/bolt/bolt/commit/b42cbfcf3e3108c46a80581216ba03ef449e419f
CVE: CVE-2020-4041
Published: 2020-06-08
Description: In Bolt CMS before version 3.7.1, the filename of uploaded files was vulnerable to stored XSS. It is not possible to inject javascript code in the file name when creating/uploading the file. But, once created/uploaded, it can be renamed to inject the payload in it. Additionally, the measures to prevent renaming the file to disallowed filename extensions could be circumvented. This is fixed in Bolt 3.7.1.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/158299/Bolt-CMS-3.7.0-XSS-CSRF-Shell-Upload.html; http://seclists.org/fulldisclosure/2020/Jul/4; https://github.com/bolt/bolt/commit/b42cbfcf3e3108c46a80581216ba03ef449e419f
CVE: CVE-2020-13844
Published: 2020-06-08
Description: Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html
CVE: CVE-2020-13962
Published: 2020-06-09
Description: Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00004.html; https://bugreports.qt.io/browse/QTBUG-83450; https://github.com/mumble-voip/mumble/issues/3679
CVE: CVE-2020-13964
Published: 2020-06-09
Description: An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmail_output_html.php allows XSS via the username template object.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/roundcube/roundcubemail/commit/37e2bc745723ef6322f0f785aefd0b9313a40f19; https://github.com/roundcube/roundcubemail/releases/tag/1.3.12; https://github.com/roundcube/roundcubemail/releases/tag/1.4.5
CVE: CVE-2020-13965
Published: 2020-06-09
Description: An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube; https://github.com/roundcube/roundcubemail/commit/884eb611627ef2bd5a2e20e02009ebb1eceecdc3; https://github.com/roundcube/roundcubemail/compare/1.4.4...1.4.5
CVE: CVE-2020-13973
Published: 2020-06-09
Description: OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause non-script content to be interpreted as JavaScript.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/OWASP/json-sanitizer/pull/20; https://github.com/OWASP/json-sanitizer/pull/20
CVE: CVE-2020-13974
Published: 2020-06-09
Description: An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html; https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=dad0bf9ce93fa40b667eccd3306783f4db4b932b
CVE: CVE-2020-5589
Published: 2020-06-09
Description: SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306, CWE-306
References: https://jvn.jp/en/jp/JVN67447798/; https://www.sony.com/electronics/support/audio-video-headphones; https://jvn.jp/en/jp/JVN67447798/
CVE: CVE-2020-10757
Published: 2020-06-09
Description: A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-843
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; https://bugzilla.redhat.com/show_bug.cgi?id=1842525; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5bfea2d9b17f1034a68147a8b03b9789af5700f9
CVE: CVE-2020-10761
Published: 2020-06-09
Description: An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-617, CWE-617
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10761; https://security.gentoo.org/glsa/202011-09
CVE: CVE-2020-13976
Published: 2020-06-09
Description: An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it refers to an old software version, requires administrative privileges, and does not provide access beyond that already available to administrative users
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://svn.dd-wrt.com/ticket/7039; https://svn.dd-wrt.com/ticket/7039
CVE: CVE-2020-13977
Published: 2020-06-09
Description: Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been mistakenly associated with CVE-2020-1408.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-829
References: https://anhtai.me/nagios-core-4-4-5-url-injection/; https://github.com/sawolf/nagioscore/tree/url-injection-fix; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P6NHNG2SJAM6DXVTXQH3AOJ4WQVKJUE/
CVE: CVE-2020-13978
Published: 2020-06-09
Description: Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk screen, to execute arbitrary OS commands via the Theme Module by visiting the admin/index.php?id=themes&action=edit_chunk URI. NOTE: there is no indication that the Edit Chunk feature was intended to prevent an administrator from using PHP's exec feature
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/monstra-cms/monstra/issues/464; https://github.com/monstra-cms/monstra/issues/464
CVE: CVE-2020-13980
Published: 2020-06-09
Description: OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists because of an incomplete fix for CVE-2020-10596. The vendor states "this is not a massive issue as you are still required to be logged into the admin.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/opencart/opencart/issues/7974; https://github.com/opencart/opencart/issues/7974
CVE: CVE-2020-13266
Published: 2020-06-09
Description: Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy keys under certain conditions
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13266.json; https://gitlab.com/gitlab-org/gitlab/-/issues/208449; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13266.json
CVE: CVE-2020-3882
Published: 2020-06-09
Description: This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/HT211170; https://support.apple.com/HT211170
CVE: CVE-2020-9792
Published: 2020-06-09
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A USB device may be able to cause a denial of service.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/HT211168; https://support.apple.com/HT211170; https://support.apple.com/HT211168
CVE: CVE-2020-13160
Published: 2020-06-09
Description: AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: http://packetstormsecurity.com/files/158291/AnyDesk-GUI-Format-String-Write.html; http://packetstormsecurity.com/files/161628/AnyDesk-5.5.2-Remote-Code-Execution.html; https://devel0pment.de/?p=1881
CVE: CVE-2020-9411
Published: 2020-06-09
Description: The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to the affected component. This vulnerability is exploitable when the configuration option 'Require Node Resp' is set to 'No'. In the event of a successful exploit, the attacker could theoretically read and write any file on the file system accessible to the affected component, thus fully affecting the confidentiality, integrity, and availability of the operating system hosting the deployment of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.
CVSS Score: 10.0 (CRITICAL)
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-tibco-managed-file-transfer-2020-9411; https://www.tibco.com/services/support/advisories
CVE: CVE-2020-9412
Published: 2020-06-09
Description: The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i: versions 7.1.0 and below, version 8.0.0.
CVSS Score: 10.0 (CRITICAL)
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2020/06/tibco-security-advisory-june-9-2020-tibco-managed-file-transfer-2020-9412; https://www.tibco.com/services/support/advisories
CVE: CVE-2020-9788
Published: 2020-06-09
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.5. A file may be incorrectly rendered to execute JavaScript.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT211170; https://support.apple.com/HT211170
CVE: CVE-2020-9789
Published: 2020-06-09
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT211168; https://support.apple.com/HT211170; https://support.apple.com/HT211171
CVE: CVE-2020-9790
Published: 2020-06-09
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT211168; https://support.apple.com/HT211170; https://support.apple.com/HT211171
CVE: CVE-2020-9791
Published: 2020-06-09
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT211168; https://support.apple.com/HT211170; https://support.apple.com/HT211171
CVE: CVE-2020-9793
Published: 2020-06-09
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://support.apple.com/HT211168; https://support.apple.com/HT211170; https://support.apple.com/HT211171
CVE: CVE-2020-9794
Published: 2020-06-09
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A malicious application may cause a denial of service or potentially disclose memory contents.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E; https://support.apple.com/HT211168; https://support.apple.com/HT211170
CVE: CVE-2020-9795
Published: 2020-06-09
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/HT211168; https://support.apple.com/HT211170; https://support.apple.com/HT211171
CVE: CVE-2020-9797
Published: 2020-06-09
Description: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to determine another application's memory layout.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT211168; https://support.apple.com/HT211170; https://support.apple.com/HT211171
CVE: CVE-2020-9800
Published: 2020-06-09
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/HT211168; https://support.apple.com/HT211171; https://support.apple.com/HT211175
CVE: CVE-2020-9801
Published: 2020-06-09
Description: A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/HT211177; https://support.apple.com/HT211177