CVE-2020-27927
- EPSS 1.21%
- Veröffentlicht 08.12.2020 21:15:13
- Zuletzt bearbeitet 21.11.2024 05:22:04
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVE-2020-27929
- EPSS 0.6%
- Veröffentlicht 08.12.2020 21:15:13
- Zuletzt bearbeitet 21.11.2024 05:22:04
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4.9. A user may send video in Group FaceTime calls without knowing that they have done so.
CVE-2020-27930
- EPSS 22.01%
- Veröffentlicht 08.12.2020 21:15:13
- Zuletzt bearbeitet 27.10.2025 17:38:57
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14...
CVE-2020-27932
- EPSS 10.23%
- Veröffentlicht 08.12.2020 21:15:13
- Zuletzt bearbeitet 27.10.2025 17:38:51
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, w...
CVE-2020-27950
- EPSS 16.35%
- Veröffentlicht 08.12.2020 21:15:13
- Zuletzt bearbeitet 27.10.2025 17:38:39
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Ca...
CVE-2020-10017
- EPSS 1.36%
- Veröffentlicht 08.12.2020 21:15:12
- Zuletzt bearbeitet 21.11.2024 04:54:39
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVE-2020-27902
- EPSS 0.32%
- Veröffentlicht 08.12.2020 21:15:12
- Zuletzt bearbeitet 21.11.2024 05:22:01
An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A person with physical access to an iOS device may be able to access stored passwords without authentication.
CVE-2020-9989
- EPSS 0.32%
- Veröffentlicht 08.12.2020 20:15:18
- Zuletzt bearbeitet 21.11.2024 05:41:39
The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A local user may be able to discover a user’s deleted messages.
CVE-2020-9993
- EPSS 1.1%
- Veröffentlicht 08.12.2020 20:15:18
- Zuletzt bearbeitet 21.11.2024 05:41:39
The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing.
CVE-2020-9996
- EPSS 0.89%
- Veröffentlicht 08.12.2020 20:15:18
- Zuletzt bearbeitet 21.11.2024 05:41:39
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to elevate privileges.