Vulnerabilities > Apple > Icloud > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-10-27 CVE-2019-8762 Cross-site Scripting vulnerability in Apple products
A validation issue was addressed with improved logic.
network
low complexity
apple CWE-79
6.1
2020-10-27 CVE-2019-8582 Out-of-bounds Read vulnerability in Apple products
An out-of-bounds read was addressed with improved bounds checking.
local
low complexity
apple CWE-125
5.5
2020-10-27 CVE-2019-8570 Unspecified vulnerability in Apple products
A logic issue was addressed with improved state management.
network
low complexity
apple
6.5
2020-10-16 CVE-2020-9925 Cross-site Scripting vulnerability in Apple products
A logic issue was addressed with improved state management.
network
low complexity
apple CWE-79
6.1
2020-10-16 CVE-2020-9916 Unspecified vulnerability in Apple products
A URL Unicode encoding issue was addressed with improved state management.
network
low complexity
apple
5.3
2020-10-16 CVE-2020-9915 Unspecified vulnerability in Apple products
An access issue existed in Content Security Policy.
network
low complexity
apple
6.5
2020-10-16 CVE-2020-9894 Out-of-bounds Read vulnerability in Apple products
An out-of-bounds read was addressed with improved input validation.
network
low complexity
apple CWE-125
4.3
2020-06-27 CVE-2020-15358 Out-of-bounds Write vulnerability in multiple products
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
local
low complexity
sqlite canonical apple oracle siemens CWE-787
5.5
2020-05-27 CVE-2020-13631 SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. 5.5
2020-05-24 CVE-2020-13434 Integer Overflow or Wraparound vulnerability in multiple products
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
5.5