10.7.4

DATE	CVE	VULNERABILITY TITLE	RISK
2020-02-27	CVE-2020-3837	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products A memory corruption issue was addressed with improved memory handling. network apple CWE-119 critical	9.3
2020-02-27	CVE-2020-3836	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products An access issue was addressed with improved memory management. local low complexity apple CWE-119	2.1
2020-02-27	CVE-2020-3835	Link Following vulnerability in Apple mac OS X A validation issue existed in the handling of symlinks. local low complexity apple CWE-59	3.6
2020-02-27	CVE-2020-3830	Link Following vulnerability in Apple mac OS X A validation issue existed in the handling of symlinks. local low complexity apple CWE-59	3.6
2020-02-27	CVE-2020-3829	Out-of-bounds Read vulnerability in Apple products An out-of-bounds read was addressed with improved bounds checking. network apple CWE-125 critical	9.3
2020-02-27	CVE-2020-3827	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X A memory corruption issue was addressed with improved input validation. network apple CWE-119 critical	9.3
2020-02-27	CVE-2020-3826	Out-of-bounds Read vulnerability in Apple products An out-of-bounds read was addressed with improved input validation. network apple CWE-125	6.8
2020-02-24	CVE-2019-20044	Improper Check for Dropped Privileges vulnerability in multiple products In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. local low complexity zsh fedoraproject debian apple CWE-273	7.8
2020-02-20	CVE-2012-5366	Resource Exhaustion vulnerability in Apple mac OS X The IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries. network low complexity apple CWE-400	7.8
2020-02-05	CVE-2019-15126	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in multiple products An issue was discovered on Broadcom Wi-Fi client devices. apple broadcom CWE-367	2.9