Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2020-07-22 CVE-2020-6514 Information Exposure vulnerability in multiple products
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
6.5
2020-06-27 CVE-2020-15358 Out-of-bounds Write vulnerability in multiple products
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
local
low complexity
sqlite canonical apple oracle siemens CWE-787
5.5
2020-06-15 CVE-2020-14155 Integer Overflow or Wraparound vulnerability in multiple products
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
network
low complexity
pcre apple gitlab oracle netapp splunk CWE-190
5.3
2020-06-15 CVE-2019-20838 Out-of-bounds Read vulnerability in multiple products
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
network
low complexity
pcre apple splunk CWE-125
7.5
2020-06-09 CVE-2020-9834 Out-of-bounds Write vulnerability in Apple mac OS X
A memory corruption issue was addressed with improved input validation.
local
low complexity
apple CWE-787
7.8
2020-06-09 CVE-2020-9858 Uncontrolled Search Path Element vulnerability in Apple Windows Migration Assistant
A dynamic library loading issue was addressed with improved path searching.
local
low complexity
apple CWE-427
7.8
2020-06-09 CVE-2020-9856 Unspecified vulnerability in Apple mac OS X
This issue was addressed with improved checks.
local
low complexity
apple
5.3
2020-06-09 CVE-2020-9855 Improper Input Validation vulnerability in Apple mac OS X
A validation issue existed in the handling of symlinks.
local
low complexity
apple CWE-20
7.8
2020-06-09 CVE-2020-9852 Integer Overflow or Wraparound vulnerability in Apple products
An integer overflow was addressed through improved input validation.
local
low complexity
apple CWE-190
7.8
2020-06-09 CVE-2020-9851 Unspecified vulnerability in Apple mac OS X
An access issue was addressed with improved access restrictions.
local
low complexity
apple
5.5