CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2020-29620
https://notcve.org/view.php?id=CVE-2020-29620
This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges. Este problema es abordado con derechos mejorados. Este problema es corregido en macOS Big Sur versión 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. • https://support.apple.com/en-us/HT212011 • CWE-269: Improper Privilege Management •
CVSS: 5.5EPSS: 0%CPEs: 22EXPL: 0CVE-2020-29615
https://notcve.org/view.php?id=CVE-2020-29615
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted image may lead to a denial of service. Se abordó una lectura fuera de límites con una comprobación de la entrada mejorada. Este problema es corregido en watchOS versión 7.2, macOS Big Sur versión 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS versión 14.3 y iPadOS versión 14.3, tvOS versión 14.3. • https://support.apple.com/en-us/HT212003 https://support.apple.com/en-us/HT212005 https://support.apple.com/en-us/HT212009 https://support.apple.com/en-us/HT212011 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 18EXPL: 0CVE-2020-27949
https://notcve.org/view.php?id=CVE-2020-27949
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may cause unexpected changes in memory belonging to processes traced by DTrace. Este problema es abordado con comprobaciones mejoradas para impedir acciones no autorizadas. Este problema es corregido en macOS Big Sur versión 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. • https://support.apple.com/en-us/HT212011 •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2020-27933
https://notcve.org/view.php?id=CVE-2020-27933
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, iCloud for Windows 7.20, watchOS 6.2.8, tvOS 13.4.8, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously crafted image may lead to arbitrary code execution. Se abordó un problema de corrupción de memoria con una comprobación de la entrada mejorada. Este problema es corregido en iOS versión 13.6 y iPadOS versión 13.6, iCloud para Windows versión 7.20, watchOS versión 6.2.8, tvOS versión 13.4.8, macOS Catalina versión 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. • https://support.apple.com/en-us/HT211288 https://support.apple.com/en-us/HT211289 https://support.apple.com/en-us/HT211290 https://support.apple.com/en-us/HT211291 https://support.apple.com/en-us/HT211295 • CWE-787: Out-of-bounds Write •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-27936
https://notcve.org/view.php?id=CVE-2020-27936
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A local user may be able to cause unexpected system termination or read kernel memory. Se presentó un problema de lectura fuera de límites que conllevó a una divulgación de la memoria del Kernel. • https://support.apple.com/en-us/HT212011 • CWE-125: Out-of-bounds Read •