CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0CVE-2019-8531
https://notcve.org/view.php?id=CVE-2019-8531
27 Oct 2020 — A validation issue existed in Trust Anchor Management. This issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. An untrusted radius server certificate may be trusted. Se presentó un problema de comprobación en Trust Anchor Management. • https://support.apple.com/en-us/HT209599 • CWE-295: Improper Certificate Validation •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-9857
https://notcve.org/view.php?id=CVE-2020-9857
27 Oct 2020 — An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra. A malicious website may be able to exfiltrate autofilled data in Safari. Se presentó un problema en el análisis de URL. • https://support.apple.com/en-us/HT211170 •
CVSS: 9.3EPSS: 0%CPEs: 5EXPL: 0CVE-2020-3880
https://notcve.org/view.php?id=CVE-2020-3880
27 Oct 2020 — An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Processing a maliciously crafted image may lead to arbitrary code execution. Se abordó una lectura fuera de límites con una comprobación de entrada mejorada. Este problema se corrigió en watchOS versión 6.1.2, iOS versión 13.3.1 y iPadOS versión 13.3.1, tvOS vers... • https://support.apple.com/en-us/HT210918 • CWE-125: Out-of-bounds Read •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-9782
https://notcve.org/view.php?id=CVE-2020-9782
27 Oct 2020 — A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. A remote attacker may be able to overwrite existing files. Se abordó un problema de análisis en el manejo de rutas de directorio con una comprobación de rutas mejorada. Este problema se corrigió en macOS Catalina versión 10.15.2, Security Update 2019-002 Mojave y Security Update 2019-007 ... • https://support.apple.com/en-us/HT210788 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-3863
https://notcve.org/view.php?id=CVE-2020-3863
27 Oct 2020 — A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. An application may be able to execute arbitrary code with system privileges. Se abordó un problema de corrupción de la memoria con un manejo de la memoria mejorada. Este problema se corrigió en macOS Catalina versión 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. • https://support.apple.com/en-us/HT210919 • CWE-787: Out-of-bounds Write •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-9786
https://notcve.org/view.php?id=CVE-2020-9786
27 Oct 2020 — This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. An application may be able to trigger a sysdiagnose. Este problema se abordó con comprobaciones mejoradas. Este problema se corrigió en macOS Catalina versión 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. Una aplicación puede ser capaz de activar un diagnóstico del sistema • https://support.apple.com/en-us/HT211100 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-9774
https://notcve.org/view.php?id=CVE-2020-9774
27 Oct 2020 — An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted data. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Encrypted data may be inappropriately accessed. Se presentó un problema con el acceso de Siri Suggestions a los datos cifrados. • https://support.apple.com/en-us/HT210919 • CWE-311: Missing Encryption of Sensitive Data •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8858
https://notcve.org/view.php?id=CVE-2019-8858
27 Oct 2020 — A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A user who shares their screen may not be able to end screen sharing. Se abordó un problema lógico con una administración de estado mejorada. Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006. • https://support.apple.com/en-us/HT210722 •
CVSS: 6.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8855
https://notcve.org/view.php?id=CVE-2019-8855
27 Oct 2020 — An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access restricted files. Se abordó un problema de acceso con restricciones adicionales de sandbox. Este problema se corrigió en macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2019-8854
https://notcve.org/view.php?id=CVE-2019-8854
27 Oct 2020 — A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. A device may be passively tracked by its Wi-Fi MAC address. Se abordó un problema de privacidad del usuario al eliminar la dirección MAC de transmisión. Este problema se corrigió en macOS Catalina versión 10.15, watchOS versión 6, iOS versión 13, tvOS versión 13. • https://support.apple.com/en-us/HT210604 •