Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple Multiple ProductsApple Multiple Products Code Execution Vulnerability

Risk 86
Severity
7.8
Exploited
Double Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.

1 / 3
First published (updated )
CVE-2020-9859

Apple macOS CatalinaKernel. Multiple memory corruption issues were addressed with improved state management.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Kernel. Multiple memory corruption issues were addressed with improved state management.

1 / 2
First published (updated )
CVE-2020-9785

apple macOS CatalinaInput Validation

Risk 53
Severity
7.1
Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Bluetooth. An out-of-bounds read was addressed with improved input validation.

1 / 2
First published (updated )
CVE-2020-3912

Apple macOS CatalinaCoreFoundation. A permissions issue existed. This issue was addressed with improved permission valid…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CoreFoundation. A permissions issue existed. This issue was addressed with improved permission validation.

1 / 4
First published (updated )
CVE-2020-3913

Apple macOS CatalinaIOHIDFamily. A memory initialization issue was addressed with improved memory handling.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges.

1 / 2
First published (updated )
CVE-2020-3919

apple macOS CatalinaApple HSSPI Support. A memory corruption issue was addressed with improved memory handling.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Apple HSSPI Support. A memory corruption issue was addressed with improved memory handling.

1 / 2
First published (updated )
CVE-2020-3903

apple macOS CatalinaAppleGraphicsControl. Multiple memory corruption issues were addressed with improved state managemen…

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AppleGraphicsControl. Multiple memory corruption issues were addressed with improved state management.

1 / 2
First published (updated )
CVE-2020-3904

apple macOS CatalinaInput Validation

Risk 53
Severity
7.1
Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Bluetooth. An out-of-bounds read was addressed with improved input validation.

1 / 2
First published (updated )
CVE-2020-3907

apple macOS CatalinaInput Validation

Risk 53
Severity
7.1
Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Bluetooth. An out-of-bounds read was addressed with improved input validation.

1 / 2
First published (updated )
CVE-2020-3908

apple macOS CatalinaInput Validation

Risk 80
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Bluetooth. A memory corruption issue was addressed with improved input validation.

1 / 2
First published (updated )
CVE-2020-3905

apple macOS CatalinaTCC. A logic issue was addressed with improved restrictions.

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

TCC. A logic issue was addressed with improved restrictions.

1 / 2
First published (updated )
CVE-2020-3906

apple macOS CatalinaInput Validation

Risk 80
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Bluetooth. A memory corruption issue was addressed with improved input validation.

1 / 2
First published (updated )
CVE-2020-3892

apple macOS CatalinaInput Validation

Risk 80
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Bluetooth. A memory corruption issue was addressed with improved input validation.

1 / 2
First published (updated )
CVE-2020-3893

Apple macOS CatalinaInput Validation

Risk 44
Severity
7.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watchOS 6.1.2. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

1 / 2
First published (updated )
CVE-2020-3877

Apple tvOSInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. An out-of-bounds read was addressed with improved input validation.

1 / 12
First published (updated )
CVE-2020-3878

Apple macOS CatalinaAppleMobileFileIntegrity. This issue was addressed with improved checks.

Risk 78
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AppleMobileFileIntegrity. This issue was addressed with improved checks.

1 / 2
First published (updated )
CVE-2020-3883

apple macOS CatalinaKernel. A memory corruption issue was addressed with improved memory handling.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Kernel. A memory corruption issue was addressed with improved memory handling.

1 / 2
First published (updated )
CVE-2020-3871

Apple tvOSInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted image may lead to arbitrary code execution.

1 / 2
First published (updated )
CVE-2020-3870

Apple tvOSAudio. A memory corruption issue was addressed with improved memory handling.

Risk 70
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.

1 / 2
First published (updated )
CVE-2020-3857

Apple tvOSInput Validation

Risk 80
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted string may lead to heap corruption.

1 / 2
First published (updated )
CVE-2020-3856

apple macOS CatalinaIntel Graphics Driver. A memory corruption issue was addressed with improved memory handling.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Intel Graphics Driver. A memory corruption issue was addressed with improved memory handling.

1 / 2
First published (updated )
CVE-2020-3845

apple macOS CatalinaSecurity. A logic issue was addressed with improved restrictions.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Security. A logic issue was addressed with improved restrictions.

1 / 2
First published (updated )
CVE-2020-3854

Apple tvOSKernel. A type confusion issue was addressed with improved memory handling.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to execute arbitrary code with system privileges.

1 / 2
First published (updated )
CVE-2020-3853

Apple tvOSBuffer Overflow, Input Validation

Risk 78
Severity
8.8
Buffer Overflow, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

libxml2. A buffer overflow was addressed with improved size validation.

1 / 8
First published (updated )
CVE-2020-3846

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 97
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

1 / 3
First published (updated )
CVE-2020-3837

Apple tvOSBuffer Overflow

Risk 69
Severity
7.8
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

IPSec. An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking.

1 / 4
First published (updated )
CVE-2020-3840

Apple tvOSKernel. A memory corruption issue was addressed with improved memory handling.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

1 / 2
First published (updated )
CVE-2020-3842

Apple tvOSwifivelocityd. The issue was addressed with improved permissions logic.

Risk 80
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.

1 / 2
First published (updated )
CVE-2020-3838

Apple macOS CatalinaInput Validation

Risk 80
Severity
8.8
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4.7, watchOS 5.3.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

1 / 2
First published (updated )
CVE-2020-3843

apple macOS CatalinaInput Validation

Risk 80
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Image Processing. A memory corruption issue was addressed with improved input validation.

1 / 2
First published (updated )
CVE-2020-3827

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203