Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple This document describes the security content of tvOSUse After Free

Risk 78
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to code execution.

1 / 2
First published (updated )
CVE-2020-9783

redhat/webkitgtkWebKit. A type confusion issue was addressed with improved memory handling.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3901

redhat/webkitgtkWebKit. A memory consumption issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3899

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3895

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved memory handling.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3900

redhat/webkitgtkWebKit. A type confusion issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3897

Apple tvOSInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. An out-of-bounds read was addressed with improved input validation.

1 / 12
First published (updated )
CVE-2020-3878

redhat/webkitgtkWebKit. Multiple memory corruption issues were addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3868

redhat/webkitgtkWebKit Page Loading. A logic issue was addressed with improved validation.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3865

Apple tvOSBuffer Overflow, Input Validation

Risk 78
Severity
8.8
Buffer Overflow, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

libxml2. A buffer overflow was addressed with improved size validation.

1 / 8
First published (updated )
CVE-2020-3846

Apple tvOSInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. An out-of-bounds read was addressed with improved input validation.

1 / 8
First published (updated )
CVE-2020-3826

SQLite SQLiteUse After Free, SQL Injection

Risk 67
Severity
7
Use After Free, SQL Injection
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow related to the snippet feature.

1 / 5
Source: Microsoft
First published (updated )
CVE-2020-13630

redhat/webkitgtkApple Multiple Products Type Confusion Vulnerability

Risk 97
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.

1 / 5
Source: CISA
First published (updated )
CVE-2019-8506

redhat/jbcs-httpd24-curlLast updated 11 July 2025

Risk 46
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber (or XMLGetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

1 / 6

Remedy

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
First published (updated )
CVE-2019-15903

redhat/chromium-browserBuffer Overflow, Integer Overflow

Risk 79
Severity
8.8
Buffer Overflow, Integer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap overflow flaw was found in the libxml2 component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=722079

External References:

https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html

1 / 3
Source: Red Hat
First published (updated )
CVE-2017-5130

Apple tvOSSQL Injection, Input Validation, Buffer Overflow, Integer Overflow

Risk 77
Severity
8.1
SQL Injection, Input Validation, Buffer Overflow, Integer Overflow
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2018-20506

Apple tvOSSQL Injection

Risk 45
Severity
7.5
SQL Injection
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2018-20505

debian/libxml2Use After Free

Risk 43
Severity
7.5
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.

1 / 2
First published (updated )
CVE-2017-9049

debian/libxml2Input Validation

Risk 43
Severity
7.5
Input Validation
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.

1 / 2
First published (updated )
CVE-2017-9050

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8563

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8559

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8558

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8524

Apple tvOSLast updated 25 August 2025

Risk 79
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2019-6212

Apple tvOSLast updated 25 August 2025

Risk 79
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: Launchpad
First published (updated )
CVE-2019-6215

Apple tvOSLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory consumption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

1 / 3
Source: Launchpad
First published (updated )
CVE-2018-4361

Apple tvOSBuffer Overflow

Risk 80
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-4359

Apple tvOSBuffer Overflow

Risk 80
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-4358

Apple tvOSBuffer Overflow

Risk 80
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-4328

Apple tvOSBuffer Overflow

Risk 80
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-4323

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203