Vulnerabilities > Apple > Iphone OS > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-07-22 CVE-2020-6514 Information Exposure vulnerability in multiple products
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
6.5
2020-06-27 CVE-2020-15358 Out-of-bounds Write vulnerability in multiple products
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
local
low complexity
sqlite canonical apple oracle siemens CWE-787
5.5
2020-06-09 CVE-2020-9835 Unspecified vulnerability in Apple Iphone OS
An issue existed in the pausing of FaceTime video.
network
low complexity
apple
5.3
2020-06-09 CVE-2020-9829 Improper Input Validation vulnerability in Apple products
A validation issue was addressed with improved input sanitization.
network
low complexity
apple CWE-20
6.5
2020-06-09 CVE-2020-9819 Out-of-bounds Write vulnerability in Apple Iphone OS and Watchos
A memory consumption issue was addressed with improved memory handling.
network
low complexity
apple CWE-787
4.3
2020-06-09 CVE-2020-9812 Unspecified vulnerability in Apple products
An information disclosure issue was addressed with improved state management.
local
low complexity
apple
5.5
2020-06-09 CVE-2020-9811 Unspecified vulnerability in Apple products
An information disclosure issue was addressed with improved state management.
local
low complexity
apple
5.5
2020-06-09 CVE-2020-9809 Unspecified vulnerability in Apple products
An information disclosure issue was addressed with improved state management.
local
low complexity
apple
5.5
2020-06-09 CVE-2020-9797 Unspecified vulnerability in Apple products
An information disclosure issue was addressed by removing the vulnerable code.
local
low complexity
apple
5.5
2020-06-09 CVE-2020-9792 Improper Input Validation vulnerability in Apple mac OS X
A validation issue was addressed with improved input sanitization.
low complexity
apple CWE-20
4.6