10.7.2

DATE	CVE	VULNERABILITY TITLE	RISK
2020-02-27	CVE-2020-3837	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products A memory corruption issue was addressed with improved memory handling. network apple CWE-119 critical	9.3
2020-02-27	CVE-2020-3836	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products An access issue was addressed with improved memory management. local low complexity apple CWE-119	2.1
2020-02-27	CVE-2020-3835	Link Following vulnerability in Apple mac OS X A validation issue existed in the handling of symlinks. local low complexity apple CWE-59	3.6
2020-02-27	CVE-2020-3830	Link Following vulnerability in Apple mac OS X A validation issue existed in the handling of symlinks. local low complexity apple CWE-59	3.6
2020-02-27	CVE-2020-3829	Out-of-bounds Read vulnerability in Apple products An out-of-bounds read was addressed with improved bounds checking. network apple CWE-125 critical	9.3
2020-02-27	CVE-2020-3827	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X A memory corruption issue was addressed with improved input validation. network apple CWE-119 critical	9.3
2020-02-27	CVE-2020-3826	Out-of-bounds Read vulnerability in Apple products An out-of-bounds read was addressed with improved input validation. network apple CWE-125	6.8
2020-02-24	CVE-2019-20044	Improper Check for Dropped Privileges vulnerability in multiple products In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. local low complexity zsh fedoraproject debian apple CWE-273	7.8
2020-02-20	CVE-2012-5366	Resource Exhaustion vulnerability in Apple mac OS X The IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries. network low complexity apple CWE-400	7.8
2020-02-12	CVE-2011-3336	Resource Exhaustion vulnerability in multiple products regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion. network low complexity php apple freebsd openbsd CWE-400	7.8