13.6

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-08	CVE-2020-10003	Link Following vulnerability in Apple products An issue existed within the path validation logic for symlinks. local low complexity apple CWE-59	7.8
2020-12-08	CVE-2020-10002	Unspecified vulnerability in Apple products A logic issue was addressed with improved state management. local low complexity apple	5.5
2020-11-13	CVE-2020-6147	Out-of-bounds Write vulnerability in multiple products A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. network pixar apple CWE-787	6.8
2020-11-03	CVE-2020-15969	Use After Free vulnerability in multiple products Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google debian fedoraproject opensuse apple CWE-416	8.8
2020-10-27	CVE-2020-9979	Unspecified vulnerability in Apple Iphone OS A trust issue was addressed by removing a legacy API. local low complexity apple	2.1
2020-10-27	CVE-2020-9973	Out-of-bounds Read vulnerability in Apple Iphone OS An out-of-bounds read was addressed with improved bounds checking. network apple CWE-125 critical	9.3
2020-10-27	CVE-2020-9961	Out-of-bounds Read vulnerability in Apple products An out-of-bounds read was addressed with improved input validation. local low complexity apple CWE-125	7.8
2020-10-27	CVE-2020-9941	Unspecified vulnerability in Apple products This issue was addressed with improved checks. network low complexity apple	7.5
2020-10-27	CVE-2019-8749	Improper Input Validation vulnerability in Apple products Multiple memory corruption issues were addressed with improved input validation. network low complexity apple CWE-20	7.5
2020-10-27	CVE-2019-8734	Unspecified vulnerability in Apple products Multiple memory corruption issues were addressed with improved memory handling. network apple	6.8