CVEs published October 27, 2020
171 CVEs were published on October 27, 2020: 1 critical, 5 high.
- Published
- 171
- Critical
- 1
- High
- 5
- Medium
- 0
- Low
- 1
- Unrated
- 164
- Now in CISA KEV
- 0
- Fix available
- 143
Most affected products
- Apple macOS
- 52
- Apple iOS · Apple macOS
- 16
- Apple iOS and iPadOS · Apple macOS
- 11
- Apple AirPort Base Station Firmware Update
- 7
- Apple tvOS · Apple iOS +2
- 7
- Apple iOS and iPadOS · Apple tvOS +3
- 6
- Apple iOS and iPadOS · Apple tvOS +2
- 5
- Apple iOS
- 3
- Apple iOS and iPadOS
- 3
- Apple iOS and iPadOS · Apple tvOS +1
- 3
Critical 1
High 5
- CVE-2020-15238Local privilege escalation Bluemanblueman-project blueman
- CVE-2020-7755Regular Expression Denial of Service (ReDoS)dat.gui
- CVE-2020-11858Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.Micro Focus Operation Bridge
- CVE-2020-7754Regular Expression Denial of Service (ReDoS)npm-user-validate
- CVE-2020-7753Regular Expression Denial of Service (ReDoS)trim
Medium, low and unrated 165
- CVE-2020-16140The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS.
- CVE-2019-8796A logic issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8664An input validation issue was addressed with improved input validation.Apple iOS · Apple watchOS
- CVE-2019-8531A validation issue existed in Trust Anchor Management.Apple iOS · Apple macOS
- CVE-2020-9982This issue was addressed with improved checks to prevent unauthorized actions.Apple Music for Android
- CVE-2020-9973An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2020-9941This issue was addressed with improved checks.Apple macOS
- CVE-2020-9932A memory corruption issue was addressed with improved validation.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2020-9979A trust issue was addressed by removing a legacy API.Apple tvOS · Apple iOS and iPadOS
- CVE-2020-9857An issue existed in the parsing of URLs.Apple macOS
- CVE-2020-3880An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2020-9782A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2020-9961An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2020-3863A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2020-9866A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2020-9860A custom URL scheme handling issue was addressed with improved input validation.Apple Safari
- CVE-2020-9786This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security UpdatApple macOS
- CVE-2020-3851A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2020-27890The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes N
- CVE-2020-27891The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Con
- CVE-2020-27892The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands
- CVE-2020-3855An access issue was addressed with improved access restrictions.Apple macOS
- CVE-2020-9774An issue existed with Siri Suggestions access to encrypted data.Apple macOS
- CVE-2019-8858A logic issue was addressed with improved state management.Apple macOS
- CVE-2020-3864A logic issue was addressed with improved validation.Apple iOS and iPadOS · Apple tvOS +3
- CVE-2019-8855An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2019-8854A user privacy issue was addressed by removing the broadcast MAC address.Apple tvOS · Apple iOS +2
- CVE-2020-3852A logic issue was addressed with improved validation.Apple Safari
- CVE-2019-8898An information disclosure issue existed in the handling of the Storage Access API.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2019-8901This issue was addressed by verifying host keys when connecting to a previously-known SSH server.Apple iOS and iPadOS
- CVE-2019-8853A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2019-8846A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple tvOS +3
- CVE-2019-8850An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2019-8857The issue was addressed with improved validation when an iCloud Link is created.Apple iOS and iPadOS
- CVE-2019-8856An API issue existed in the handling of outgoing phone calls initiated with Siri.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8848This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8852A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8847A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2020-25765Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud Dev
- CVE-2019-8851A logic issue was addressed with improved state management.Apple macOS
- CVE-2019-8836A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2019-8838A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8842A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2019-8839A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2019-8844Multiple memory corruption issues were addressed with improved memory handling.Apple iOS and iPadOS · Apple watchOS +4
- CVE-2019-8841An information disclosure issue was addressed by removing the vulnerable code.Apple iOS and iPadOS
- CVE-2019-8833A memory corruption issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8840An out-of-bounds read was addressed with improved bounds checking.Apple Xcode
- CVE-2019-8832A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8837A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2019-8830An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple iOS +1
- CVE-2019-8835Multiple memory corruption issues were addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +3
- CVE-2019-8834A configuration issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8828A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8827The HTTP referrer header may be used to leak browsing history.Apple iOS and iPadOS · Apple tvOS +3
- CVE-2019-8831A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2019-8829A memory corruption vulnerability was addressed with improved locking.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8826A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2019-8824A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2019-8780The issue was addressed with improved permissions logic.Apple iOS and iPadOS · Apple tvOS
- CVE-2019-8825A memory corruption issue was addressed with improved state management.Apple iOS · Apple macOS
- CVE-2019-8809A validation issue was addressed with improved logic.Apple iOS and iPadOS · Apple tvOS +3
- CVE-2020-27159Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in
- CVE-2019-8777A lock screen issue allowed access to contacts on a locked device.Apple macOS
- CVE-2019-8799This issue was resolved by replacing device names with a random identifier.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2019-8767A memory consumption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8774A resource exhaustion issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2019-8790This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0.Apple Swift for Ubuntu
- CVE-2019-8761This issue was addressed with improved checks.Apple macOS
- CVE-2019-8773Multiple memory corruption issues were addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +4
- CVE-2019-8756Multiple memory corruption issues were addressed with improved input validation.Apple tvOS · Apple iOS +2
- CVE-2019-8776A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8771This issue was addressed with improved iframe sandbox enforcement.Apple Safari · Apple iOS
- CVE-2019-8754A cross-origin issue existed with "iframe" elements.Apple macOS
- CVE-2019-8751Multiple memory corruption issues were addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +4
- CVE-2019-8749Multiple memory corruption issues were addressed with improved input validation.Apple tvOS · Apple iOS +2
- CVE-2019-8762A validation issue was addressed with improved logic.Apple iOS and iPadOS · Apple tvOS +3
- CVE-2019-8759An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2019-8744A memory corruption issue existed in the handling of IPv6 packets.Apple tvOS · Apple iOS +2
- CVE-2020-27158Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My Cloud NAS devices p
- CVE-2019-8736An input validation issue was addressed with improved input validation.Apple macOS
- CVE-2019-8752Multiple memory corruption issues were addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +4
- CVE-2019-8753This issue was addressed with improved checks.Apple tvOS · Apple iOS +2
- CVE-2019-8728Multiple memory corruption issues were addressed with improved memory handling.Apple tvOS · Apple iOS +4
- CVE-2019-8732The issue was addressed with improved data deletion.Apple iOS
- CVE-2019-8746An out-of-bounds read was addressed with improved input validation.Apple tvOS · Apple iOS +2
- CVE-2019-8740A memory corruption vulnerability was addressed with improved locking.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2019-8712A memory corruption issue was addressed with improved memory handling.Apple tvOS · Apple iOS +1
- CVE-2019-8737A denial of service issue was addressed with improved validation.Apple macOS
- CVE-2019-8718A memory corruption issue was addressed with improved memory handling.Apple tvOS · Apple iOS +1
- CVE-2019-8734Multiple memory corruption issues were addressed with improved memory handling.Apple tvOS · Apple iOS +4
- CVE-2019-8706A memory corruption issue was addressed with improved state management.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2019-8668A denial of service issue was addressed with improved validation.Apple iOS · Apple tvOS +1
- CVE-2019-8715A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS
- CVE-2019-8716A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8709A memory corruption issue was addressed with improved state management.Apple tvOS · Apple iOS +2
- CVE-2019-8645An issue existed in the handling of encrypted Mail.Apple macOS
- CVE-2020-27160Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS dev
- CVE-2019-8708A logic issue was addressed with improved restrictions.Apple iOS · Apple macOS
- CVE-2019-8638Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple watchOS +3
- CVE-2019-8696A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8675A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8633A validation issue was addressed with improved input sanitization.Apple iOS · Apple macOS
- CVE-2019-8642An issue existed in the handling of S-MIME certificates.Apple macOS
- CVE-2019-8612A logic issue was addressed with improved state management.Apple macOS
- CVE-2019-8656This was addressed with additional checks by Gatekeeper on files mounted through a network share.Apple macOS
- CVE-2019-8640A logic issue was addressed with improved validation.Apple macOS
- CVE-2019-8639Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple watchOS +3
- CVE-2019-8588A null pointer dereference was addressed with improved input validation.Apple AirPort Base Station Firmware Update
- CVE-2019-8581An out-of-bounds read was addressed with improved input validation.Apple AirPort Base Station Firmware Update
- CVE-2019-8631A logic issue was addressed with improved state management.Apple iOS · Apple macOS
- CVE-2019-8570A logic issue was addressed with improved state management.Apple iOS · Apple tvOS +3
- CVE-2019-8618A logic issue was addressed with improved restrictions.Apple iOS · Apple macOS
- CVE-2019-8580Source-routed IPv4 packets were disabled by default.Apple AirPort Base Station Firmware Update
- CVE-2020-12830Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthor
- CVE-2019-8592A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS
- CVE-2019-8578A use after free issue was addressed with improved memory management.Apple AirPort Base Station Firmware Update
- CVE-2019-8582An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS
- CVE-2019-8572A null pointer dereference was addressed with improved input validation.Apple AirPort Base Station Firmware Update
- CVE-2019-8547An out-of-bounds read issue existed that led to the disclosure of kernel memory.Apple iOS · Apple macOS
- CVE-2019-8579An input validation issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8573An input validation issue was addressed with improved input validation.Apple iOS · Apple macOS
- CVE-2019-8575The issue was addressed with improved data deletion.Apple AirPort Base Station Firmware Update
- CVE-2020-27888An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices.
- CVE-2019-8538A denial of service issue was addressed with improved validation.Apple iOS · Apple macOS
- CVE-2019-8569A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8564A logic issue was addressed with improved validation.Apple macOS
- CVE-2019-8528A use after free issue was addressed with improved memory management.Apple iOS · Apple macOS
- CVE-2019-8534A logic issue existed resulting in memory corruption.Apple macOS
- CVE-2019-8539A memory initialization issue was addressed with improved memory handling.Apple macOS
- CVE-2019-7291A denial of service issue was addressed with improved memory handling.Apple AirPort Base Station Firmware Update
- CVE-2019-8532A permissions issue was addressed by removing vulnerable code and adding additional checks.Apple iOS · Apple watchOS
- CVE-2019-8509This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2019-8525A memory corruption issue was addressed with improved state management.Apple iOS · Apple macOS
- CVE-2019-7288The issue was addressed with improved validation on the FaceTime server.Apple iOS · Apple macOS
- CVE-2018-4474A memory consumption issue was addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-6238A validation issue existed in the handling of symlinks.Apple macOS
- CVE-2018-4467A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2018-4448A memory initialization issue was addressed with improved memory handling.Apple iOS · Apple macOS
- CVE-2018-4452A memory consumption issue was addressed with improved memory handling.Apple macOS
- CVE-2018-4468This issue was addressed by removing additional entitlements.Apple macOS
- CVE-2018-4451This issue is fixed in macOS Mojave 10.14.Apple macOS
- CVE-2018-4433A configuration issue was addressed with additional restrictions.Apple iOS · Apple tvOS +2
- CVE-2018-4444A logic issue was addressed with improved state management.Apple iOS · Apple tvOS +2
- CVE-2018-4391An inconsistent user interface issue was addressed with improved state management.Apple macOS
- CVE-2018-4428A lock screen issue allowed access to the share function on a locked device.Apple iOS
- CVE-2018-4381A resource exhaustion issue was addressed with improved input validation.Apple iOS · Apple tvOS
- CVE-2018-4390An inconsistent user interface issue was addressed with improved state management.Apple macOS
- CVE-2018-4339This issue was addressed with a new entitlement.Apple iOS
- CVE-2018-4296This issue is fixed in macOS Mojave 10.14.Apple macOS
- CVE-2020-27853Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a for
- CVE-2020-23945A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file.
- CVE-2020-6023Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware.Check Point ZoneAlarm
- CVE-2020-6022Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware.Check Point ZoneAlarm
- CVE-2020-8579Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster Lclustered Data ONTAP
- CVE-2020-10256An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1Password SCIM bridge
- CVE-2020-23864An issue exits in IOBit Malware Fighter version 8.0.2.547.
- CVE-2020-27179konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset tokens.
- CVE-2020-27183A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user i
- CVE-2020-27182Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to inject arbitrary JavaS
- CVE-2020-27181A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset
- CVE-2020-27180konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter.
- CVE-2020-8956Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.
- CVE-2020-15352An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remo
- CVE-2018-21269checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be