Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS Big SurApple macOS ImageIO PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 69
Severity
7.8
Buffer Overflow, Input Validation, Race Condition, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution.

1 / 30
Source: MITRE
First published (updated )
CVE-2021-30785

Apple macOS Big SurInput Validation, Race Condition, Integer Overflow, Use After Free

Risk 69
Severity
7.8
Input Validation, Race Condition, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 28
Source: Apple
First published (updated )
CVE-2021-30779

SQLite SQLiteUse After Free, SQL Injection

Risk 67
Severity
7
Use After Free, SQL Injection
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow related to the snippet feature.

1 / 5
Source: Microsoft
First published (updated )
CVE-2020-13630

redhat/webkitgtkWebKit. A type confusion issue was addressed with improved memory handling.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3901

redhat/webkitgtkWebKit. A memory consumption issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3899

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3895

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved memory handling.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3900

Apple This document describes the security content of tvOSUse After Free

Risk 78
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to code execution.

1 / 2
First published (updated )
CVE-2020-9783

redhat/webkitgtkWebKit. A type confusion issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3897

Apple tvOSInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. An out-of-bounds read was addressed with improved input validation.

1 / 8
First published (updated )
CVE-2020-3826

Apple tvOSInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. An out-of-bounds read was addressed with improved input validation.

1 / 12
First published (updated )
CVE-2020-3878

Apple tvOSBuffer Overflow, Input Validation

Risk 78
Severity
8.8
Buffer Overflow, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

libxml2. A buffer overflow was addressed with improved size validation.

1 / 8
First published (updated )
CVE-2020-3846

redhat/webkitgtkWebKit. Multiple memory corruption issues were addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3868

redhat/webkitgtkWebKit Page Loading. A logic issue was addressed with improved validation.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3865

redhat/jbcs-httpd24-curlLast updated 11 July 2025

Risk 46
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber (or XMLGetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

1 / 6

Remedy

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
First published (updated )
CVE-2019-15903

redhat/webkitgtkApple Multiple Products Type Confusion Vulnerability

Risk 97
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.

1 / 5
Source: CISA
First published (updated )
CVE-2019-8506

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8524

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8558

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8563

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8559

Apple tvOSLast updated 25 August 2025

Risk 79
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2019-6212

Apple tvOSLast updated 25 August 2025

Risk 79
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: Launchpad
First published (updated )
CVE-2019-6215

Apple tvOSSQL Injection

Risk 45
Severity
7.5
SQL Injection
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2018-20505

Apple tvOSSQL Injection, Input Validation, Buffer Overflow, Integer Overflow

Risk 77
Severity
8.1
SQL Injection, Input Validation, Buffer Overflow, Integer Overflow
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2018-20506

Apple tvOSSQL Injection, Input Validation, Buffer Overflow, Integer Overflow

Risk 79
Severity
8.1
SQL Injection, Input Validation, Buffer Overflow, Integer Overflow
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2018-20346

Apple tvOSBuffer Overflow

Risk 80
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-4323

Apple tvOSUse After Free

Risk 80
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

1 / 3
Source: Launchpad
First published (updated )
CVE-2018-4318

Apple WatchOSLast updated 25 August 2025

Risk 61
Severity
8.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

1 / 4
Source: Launchpad
First published (updated )
CVE-2018-4319

Apple tvOSUse After Free

Risk 80
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

1 / 3
Source: Launchpad
First published (updated )
CVE-2018-4317

Apple tvOSUse After Free

Risk 80
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

1 / 3
Source: Launchpad
First published (updated )
CVE-2018-4315

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203