Update Your iOS Devices Now — 3 Actively Exploited 0
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-15999 | Heap Buffer Overflow in FreeType Font Rendering in Google Chrome (CVE-2020-15999) | 9.6 | 64% | KEVPoC ×2 | KEV |
| CVE-2020-16009 | Type Confusion in Google Chromium V8 Engine Enables RCE via Crafted HTML Pages | 8.8 | 48% | KEVPoC ×2 | KEV |
| CVE-2020-16010 | Heap Buffer Overflow in Google Chrome for Android Enables Sandbox Escape | 9.6 | 6% | KEV | KEV |
| CVE-2020-17087 | Windows Kernel Buffer Overflow Enables Local Privilege Escalation (CVE-2020-17087) | 7.8 | 5% | KEV | KEV |
CVE-2020-27930+2 related CVEs | Out-of-bounds write in Apple FontParser enables code execution on iOS, macOS, watchOS | 7.8 group max | 22% | KEV | KEV |
From the original article
2 min read at thehackernews.com
Apple on Thursday released multiple security updates to patch three zero-day vulnerabilities that were revealed as being actively exploited in the wild. Rolled out as part of its iOS, iPadOS, macOS, and watchOS updates, the flaws reside in the FontParser component and the kernel, allowing adversaries to remotely execute arbitrary code and run malicious programs with kernel-level privileges.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.