CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2020-3864 – webkitgtk: Non-unique security origin for DOM object contexts
https://notcve.org/view.php?id=CVE-2020-3864
17 Feb 2020 — A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin. Se abordó un problema lógico con una comprobación mejorada. Este problema se corrigió en iCloud para Windows versión 7.17, iTunes versión 12.10.4 para Windows, iCloud para Windows versión 10.9.2, tvOS versión 13.3.1, Safari vers... • https://support.apple.com/en-us/HT210918 • CWE-346: Origin Validation Error •
CVSS: 3.1EPSS: 0%CPEs: 15EXPL: 5CVE-2019-15126 – Broadcom Wi-Fi Devices - 'KR00K Information Disclosure
https://notcve.org/view.php?id=CVE-2019-15126
05 Feb 2020 — An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503. Se detectó un problema en los dispositivos cliente de Broadcom Wi-Fi. Específicamente un tráfic... • https://packetstorm.news/files/id/156809 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0CVE-2020-3825 – Apple Security Advisory 2020-1-29-1
https://notcve.org/view.php?id=CVE-2020-3825
30 Jan 2020 — Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution. Se abordaron múltiples problemas de corrupción de memoria con un manejo de memoria mejorado. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, tvOS 13.3.1, Safari versi... • https://support.apple.com/HT210947 • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0CVE-2020-3862 – webkitgtk: Denial of service via incorrect memory handling
https://notcve.org/view.php?id=CVE-2020-3862
30 Jan 2020 — A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service. Se abordó un problema de denegación de servicio con un manejo de memoria mejorado. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, tvOS versión 13.3.1, Safari versión 13.0.5, iTunes para Windows... • http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html •
CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 0CVE-2020-3865 – webkitgtk: Incorrect security check for a top-level DOM object context
https://notcve.org/view.php?id=CVE-2020-3865
30 Jan 2020 — Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution. Se abordaron múltiples problemas de corrupción de memoria con un manejo de memoria mejorado. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, tvOS versión 13.3.1, Safa... • http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html • CWE-787: Out-of-bounds Write •
CVSS: 6.1EPSS: 0%CPEs: 9EXPL: 0CVE-2020-3867 – webkitgtk: Incorrect state management leading to universal cross-site scripting
https://notcve.org/view.php?id=CVE-2020-3867
30 Jan 2020 — A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting. Se abordó un problema lógico con una administración de estado mejorada. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, tvOS versión 13.3.1, Safari versión 13.0.5, iTunes para Wind... • http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-3874 – Apple Security Advisory 2020-1-28-1
https://notcve.org/view.php?id=CVE-2020-3874
29 Jan 2020 — An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Messages app may reveal additional message content. Se presentó un problema en el nombramiento de la captura de pantalla. • https://support.apple.com/HT210918 • CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer •
CVSS: 2.4EPSS: 0%CPEs: 2EXPL: 0CVE-2020-3859 – Apple Security Advisory 2020-1-28-1
https://notcve.org/view.php?id=CVE-2020-3859
29 Jan 2020 — An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen. Se abordó un problema de interfaz de usuario incoherente con una administración de estado mejorada. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1. • https://support.apple.com/HT210918 •
CVSS: 2.4EPSS: 0%CPEs: 2EXPL: 0CVE-2020-3828 – Apple Security Advisory 2020-1-28-1
https://notcve.org/view.php?id=CVE-2020-3828
29 Jan 2020 — A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen. Un problema de la pantalla de bloqueo permitió el acceso a los contactos sobre un dispositivo bloqueado. • https://support.apple.com/HT210918 •
CVSS: 3.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-3844 – Apple Security Advisory 2020-1-28-1
https://notcve.org/view.php?id=CVE-2020-3844
29 Jan 2020 — This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Users removed from an iMessage conversation may still be able to alter state. Este problema se abordó con controles mejorados. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1. • https://support.apple.com/HT210918 •