Vulnerabilities > Apple > Iphone OS > 13.6

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-9964 Improper Initialization vulnerability in Apple Iphone OS
A memory initialization issue was addressed with improved memory handling.
local
low complexity
apple CWE-665
5.5
2020-10-16 CVE-2020-9959 Improper Locking vulnerability in Apple Iphone OS
A lock screen issue allowed access to messages on a locked device.
low complexity
apple CWE-667
2.4
2020-10-16 CVE-2020-9958 Out-of-bounds Write vulnerability in Apple Iphone OS
An out-of-bounds write issue was addressed with improved bounds checking.
local
low complexity
apple CWE-787
7.8
2020-10-16 CVE-2020-9952 Cross-site Scripting vulnerability in multiple products
An input validation issue was addressed with improved input validation.
network
low complexity
apple webkit CWE-79
7.1
2020-10-16 CVE-2020-9951 Use After Free vulnerability in multiple products
A use after free issue was addressed with improved memory management.
6.8
2020-10-16 CVE-2020-9946 Improper Locking vulnerability in Apple Iphone OS
This issue was addressed with improved checks.
low complexity
apple CWE-667
6.8
2020-06-27 CVE-2020-15358 Out-of-bounds Write vulnerability in multiple products
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
local
low complexity
sqlite canonical apple oracle siemens CWE-787
2.1
2020-05-27 CVE-2020-13631 SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. 5.5
2020-05-27 CVE-2020-13630 Use After Free vulnerability in multiple products
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
7.0
2020-05-24 CVE-2020-13434 Integer Overflow or Wraparound vulnerability in multiple products
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
5.5