CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2020-3875 – macOS/iOS kern_stack_snapshot_internal() Userspace Share Issue
https://notcve.org/view.php?id=CVE-2020-3875
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory. Se abordó un problema de comprobación con un saneamiento de entrada mejorado. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, macOS Catalina versión 10.15.3, tvOS versión 13.3.1, watchOS versión 6.1.2. • https://support.apple.com/HT210918 https://support.apple.com/HT210919 https://support.apple.com/HT210920 https://support.apple.com/HT210921 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2020-3870 – macOS ImageIO JPEG Out-Of-Bounds Write
https://notcve.org/view.php?id=CVE-2020-3870
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted image may lead to arbitrary code execution. Se abordó una lectura fuera de límites con una comprobación de entrada mejorada. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, macOS Catalina versión 10.15.3, tvOS versión 13.3.1, watchOS versión 6.1.2. • https://support.apple.com/HT210918 https://support.apple.com/HT210919 https://support.apple.com/HT210920 https://support.apple.com/HT210921 • CWE-125: Out-of-bounds Read •
CVSS: 9.3EPSS: 0%CPEs: 20EXPL: 0CVE-2020-3838
https://notcve.org/view.php?id=CVE-2020-3838
The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges. El problema se abordó con una lógica de permisos mejorada. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, macOS Catalina versión 10.15.3, tvOS versión 13.3.1, watchOS versión 6.1.2. • http://seclists.org/fulldisclosure/2021/Apr/51 https://support.apple.com/HT210918 https://support.apple.com/HT210919 https://support.apple.com/HT210920 https://support.apple.com/HT210921 https://support.apple.com/kb/HT212326 https://support.apple.com/kb/HT212327 • CWE-276: Incorrect Default Permissions •
CVSS: 9.3EPSS: 0%CPEs: 5EXPL: 1CVE-2020-3837 – Apple Multiple Products Memory Corruption Vulnerability
https://notcve.org/view.php?id=CVE-2020-3837
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges. Se abordó un problema de corrupción de memoria con un manejo de memoria mejorado. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, macOS Catalina versión 10.15.3, tvOS versión 13.3.1, watchOS versión 6.1.2. • https://www.exploit-db.com/exploits/48035 https://support.apple.com/HT210918 https://support.apple.com/HT210919 https://support.apple.com/HT210920 https://support.apple.com/HT210921 • CWE-787: Out-of-bounds Write •
CVSS: 9.3EPSS: 0%CPEs: 5EXPL: 0CVE-2020-3853 – macOS/iOS XNU mk_timer_create_trap() Race Condition
https://notcve.org/view.php?id=CVE-2020-3853
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to execute arbitrary code with system privileges. Se abordó un problema de confusión de tipos con un manejo de memoria mejorado. Este problema es corregido en iOS versión 13.3.1 y iPadOS versión 13.3.1, macOS Catalina versión 10.15.3, tvOS versión 13.3.1, watchOS versión 6.1.2. • https://support.apple.com/HT210918 https://support.apple.com/HT210919 https://support.apple.com/HT210920 https://support.apple.com/HT210921 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •