Vulnerabilities > Apple > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-02-27 CVE-2020-3867 Cross-site Scripting vulnerability in multiple products
A logic issue was addressed with improved state management.
network
low complexity
apple opensuse webkitgtk CWE-79
6.1
2020-02-27 CVE-2020-3866 Unspecified vulnerability in Apple mac OS X
This was addressed with additional checks by Gatekeeper on files mounted through a network share.
local
low complexity
apple
5.5
2020-02-27 CVE-2020-3862 A denial of service issue was addressed with improved memory handling.
network
low complexity
apple opensuse
6.5
2020-02-27 CVE-2020-3841 Insufficiently Protected Credentials vulnerability in Apple Iphone OS
The issue was addressed with improved UI handling.
network
low complexity
apple CWE-522
6.5
2020-02-27 CVE-2020-3839 Improper Input Validation vulnerability in Apple mac OS X
A validation issue was addressed with improved input sanitization.
local
low complexity
apple CWE-20
5.5
2020-02-27 CVE-2020-3836 Unspecified vulnerability in Apple products
An access issue was addressed with improved memory management.
local
low complexity
apple
5.5
2020-02-27 CVE-2020-3835 Link Following vulnerability in Apple mac OS X
A validation issue existed in the handling of symlinks.
local
low complexity
apple CWE-59
4.4
2020-02-27 CVE-2020-3833 Unspecified vulnerability in Apple Safari
An inconsistent user interface issue was addressed with improved state management.
network
low complexity
apple
4.3
2020-02-05 CVE-2011-0220 Improper Input Validation vulnerability in Apple Bonjour
Apple Bonjour before 2011 allows a crash via a crafted multicast DNS packet.
local
low complexity
apple CWE-20
5.5
2020-01-30 CVE-2013-1867 Link Following vulnerability in Apple Tokend 032013
Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability
low complexity
apple CWE-59
6.1