Recently modified exploited vulnerabilities for "apple high sierra"

Where

AND

Sort:

Apple iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Input Validation Vulnerability

Risk 65

Severity

5.5

Exploited

Input Validation

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.

1 / 3

First published (updated )

CVE-2020-9934

Apple Multiple ProductsApple Multiple Products Code Execution Vulnerability

Risk 86

Severity

7.8

Exploited

Double Free

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.

1 / 3

First published (updated )

CVE-2020-9859

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 97

Severity

7.8

Exploited

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

1 / 3

First published (updated )

CVE-2020-3837

Apple Multiple ProductsApple Multiple Products Memory Initialization Vulnerability

Risk 65

Severity

5.5

Exploited

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.

1 / 3

First published (updated )

CVE-2020-27950

Apple Multiple ProductsApple Multiple Products Type Confusion Vulnerability

Risk 97

Severity

7.8

Exploited

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.

1 / 3

First published (updated )

CVE-2020-27932

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 85

Severity

7.8

Exploited

Input Validation

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processing a maliciously crafted font may lead to arbitrary code execution.

1 / 3

First published (updated )

CVE-2020-27930