Vulnerabilities > Apple > Watchos > 5.0.1

DATE CVE VULNERABILITY TITLE RISK
2020-02-27 CVE-2020-3870 Out-of-bounds Read vulnerability in Apple products
An out-of-bounds read was addressed with improved input validation.
network
apple CWE-125
6.8
2020-02-27 CVE-2020-3860 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Ipados and Iphone OS
A memory corruption issue was addressed with improved input validation.
local
low complexity
apple CWE-119
7.2
2020-02-27 CVE-2020-3857 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
A memory corruption issue was addressed with improved memory handling.
local
low complexity
apple CWE-119
7.2
2020-02-27 CVE-2020-3856 Improper Input Validation vulnerability in Apple products
A memory corruption issue was addressed with improved input validation.
network
apple CWE-20
critical
9.3
2020-02-27 CVE-2020-3853 Type Confusion vulnerability in Apple products
A type confusion issue was addressed with improved memory handling.
network
apple CWE-843
critical
9.3
2020-02-27 CVE-2020-3846 XML Injection (aka Blind XPath Injection) vulnerability in Apple products
A buffer overflow was addressed with improved size validation.
network
apple CWE-91
6.8
2020-02-27 CVE-2020-3843 Out-of-bounds Write vulnerability in Apple Iphone OS and Watchos
A memory corruption issue was addressed with improved input validation.
network
apple CWE-787
critical
9.3
2020-02-27 CVE-2020-3842 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
A memory corruption issue was addressed with improved memory handling.
network
apple CWE-119
critical
9.3
2020-02-27 CVE-2020-3838 Incorrect Default Permissions vulnerability in Apple products
The issue was addressed with improved permissions logic.
network
apple CWE-276
critical
9.3
2020-02-27 CVE-2020-3837 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
A memory corruption issue was addressed with improved memory handling.
network
apple CWE-119
critical
9.3