Vulnerabilities > Apple > MAC OS X > 10.15.5

DATE CVE VULNERABILITY TITLE RISK
2021-04-02 CVE-2020-10015 Out-of-bounds Write vulnerability in Apple mac OS X and Macos
An out-of-bounds write issue was addressed with improved bounds checking.
network
apple CWE-787
critical
9.3
2021-04-02 CVE-2020-10001 Improper Input Validation vulnerability in multiple products
An input validation issue was addressed with improved memory handling.
network
apple debian CWE-20
4.3
2020-12-14 CVE-2020-8286 Improper Certificate Validation vulnerability in multiple products
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
7.5
2020-12-14 CVE-2020-8285 Uncontrolled Recursion vulnerability in multiple products
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
7.5
2020-12-14 CVE-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. 3.7
2020-12-08 CVE-2020-9991 Unspecified vulnerability in Apple products
This issue was addressed with improved checks.
network
low complexity
apple
7.5
2020-12-08 CVE-2020-27896 Path Traversal vulnerability in Apple mac OS X and Macos
A path handling issue was addressed with improved validation.
local
low complexity
apple CWE-22
5.5
2020-12-08 CVE-2020-27932 Type Confusion vulnerability in Apple products
A type confusion issue was addressed with improved state handling.
network
apple CWE-843
critical
9.3
2020-12-08 CVE-2020-27930 Out-of-bounds Write vulnerability in Apple products
A memory corruption issue was addressed with improved input validation.
network
apple CWE-787
6.8
2020-12-08 CVE-2020-10017 Out-of-bounds Write vulnerability in Apple products
An out-of-bounds write was addressed with improved input validation.
local
low complexity
apple CWE-787
7.8