2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-3844LOW3.3This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Users removed from a...
CVE-2020-3843HIGH8.8A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4.7, watchOS 5.3.7...
CVE-2020-3842HIGH7.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3...
CVE-2020-3841MEDIUM6.5The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A...
CVE-2020-3840HIGH7.8An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bou...
CVE-2020-3839MEDIUM5.5A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.3. An app...
CVE-2020-3838HIGH7.8The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Cata...
CVE-2020-3837HIGH7.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3...
CVE-2020-3836MEDIUM5.5An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macO...
CVE-2020-3835MEDIUM4.4A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T...
CVE-2020-3834HIGH7.8A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 6.1.2. An applica...
CVE-2020-3833MEDIUM4.3An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5....
CVE-2020-3831HIGH7A race condition was addressed with improved locking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. An applicatio...
CVE-2020-3830LOW3.3A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T...
CVE-2020-3829HIGH7.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, ...
CVE-2020-3828LOW2.4A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state manageme...
CVE-2020-3827HIGH7.8A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. V...
CVE-2020-3826HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1,...
CVE-2020-3825HIGH8.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iP...
CVE-2020-5402HIGH8.8In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being...
CVE-2020-5401MEDIUM5.3Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send inva...
CVE-2020-5400MEDIUM6.5Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, w...
CVE-2020-7043CRITICAL9.1An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate vali...
CVE-2020-7042MEDIUM5.3An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate va...
CVE-2020-7041MEDIUM5.3An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate va...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now