Apple

macOS

2323 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-8286

Exploit
  • EPSS 0.28%
  • Published 14.12.2020 20:15:14
  • Last modified 21.11.2024 05:38:39

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

4.3

CVE-2020-8284

  • EPSS 0.1%
  • Published 14.12.2020 20:15:13
  • Last modified 21.11.2024 05:38:39

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed,...

7.5

CVE-2020-8285

Exploit
  • EPSS 0.59%
  • Published 14.12.2020 20:15:13
  • Last modified 21.11.2024 05:38:39

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

7.8

CVE-2020-13520

Exploit
  • EPSS 0.9%
  • Published 11.12.2020 04:15:11
  • Last modified 21.11.2024 05:01:25

An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execu...

5.5

CVE-2020-27896

  • EPSS 1.02%
  • Published 08.12.2020 22:15:18
  • Last modified 21.11.2024 05:22:00

A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to modify the file system.

7.8

CVE-2020-27918

  • EPSS 0.18%
  • Published 08.12.2020 22:15:18
  • Last modified 21.11.2024 05:22:03

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciou...

9.3

CVE-2020-27903

  • EPSS 0.33%
  • Published 08.12.2020 21:15:13
  • Last modified 21.11.2024 05:22:01

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to gain elevated privileges.

9.3

CVE-2020-27904

  • EPSS 11.48%
  • Published 08.12.2020 21:15:13
  • Last modified 21.11.2024 05:22:01

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.

9.3

CVE-2020-27906

  • EPSS 2.32%
  • Published 08.12.2020 21:15:13
  • Last modified 21.11.2024 05:22:01

Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption.

9.3

CVE-2020-27909

  • EPSS 0.86%
  • Published 08.12.2020 21:15:13
  • Last modified 21.11.2024 05:22:01

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.