Vulnerabilities > Apple > Ipados > 13.6

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-9958 Out-of-bounds Write vulnerability in Apple Iphone OS
An out-of-bounds write issue was addressed with improved bounds checking.
local
low complexity
apple CWE-787
7.8
2020-10-16 CVE-2020-9952 Cross-site Scripting vulnerability in multiple products
An input validation issue was addressed with improved input validation.
network
low complexity
apple webkit CWE-79
7.1
2020-10-16 CVE-2020-9951 Use After Free vulnerability in multiple products
A use after free issue was addressed with improved memory management.
network
low complexity
apple webkit debian CWE-416
8.8
2020-10-16 CVE-2020-9946 Improper Locking vulnerability in Apple Iphone OS
This issue was addressed with improved checks.
low complexity
apple CWE-667
6.8
2020-06-27 CVE-2020-15358 Out-of-bounds Write vulnerability in multiple products
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
local
low complexity
sqlite canonical apple oracle siemens CWE-787
5.5
2020-05-27 CVE-2020-13631 SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. 5.5
2020-05-27 CVE-2020-13630 Use After Free vulnerability in multiple products
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
7.0
2020-05-24 CVE-2020-13434 Integer Overflow or Wraparound vulnerability in multiple products
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
5.5
2020-04-01 CVE-2020-9773 Unspecified vulnerability in Apple Iphone OS
The issue was addressed with improved handling of icon caches.
local
low complexity
apple
3.3
2019-12-19 CVE-2019-19906 Off-by-one Error vulnerability in multiple products
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.
7.5