Apple iOS/macOS October 2020 Security Update: Multiple CVEs in WebKit, Kernel, Safari

Critical Vulnerability Information CVE-2020-24215: Affects the Accounts component, potentially allowing recovery of sensitive keyboard data from backups. CVE-2020-24368: Affects the Audio component, enabling arbitrary code execution by processing maliciously crafted files. CVE-2020-24244: Affects the Audio component, causing crashes due to improper memory handling. CVE-2020-24349: Affects the BiometricKit component, potentially bypassing intended system restrictions. CVE-2020-24042: Affects the Calendar component, potentially breaking its sandbox. CVE-2020-24242: Affects the CloudKit component, potentially leading to private information access. CVE-2020-24365: Affects the CoreAudio component, potentially causing application termination or memory corruption. CVE-2020-24360: Affects the CoreMedia component, potentially causing application termination or memory corruption. CVE-2020-24361: Affects the curl component, potentially leading to arbitrary code execution on a server. CVE-2020-30474: Affects the Foundation component, potentially enabling access to sensitive user data. CVE-2020-24270: Affects the ImageIO component, potentially leading to user information leakage. CVE-2020-24203: Affects the Kernel component, potentially leading to kernel privilege escalation and timing-based denial-of-service. CVE-2020-27713: Affects the Kernel component, potentially allowing modification of protected filesystem sections. CVE-2020-24716: Affects the libapp component, potentially causing unintended application termination. CVE-2020-24340: Affects the NetworkExtension component, potentially enabling enumeration of user-installed applications. CVE-2020-24343: Affects the Photos component, potentially allowing access to photos in the photo library without authorization. CVE-2020-30465: Affects the Power Services component, potentially enabling sandbox bypass. CVE-2020-30469: Affects the Safari component, potentially enabling remote code execution. CVE-2020-24345: Affects the Shortcuts component, potentially enabling access to files normally accessible only to the Shortcuts app. CVE-2020-24346: Affects the Siri component, potentially enabling access to sensitive user data. CVE-2020-24201: Affects the WebKit component, potentially breaking the Web Content sandbox. CVE-2020-30428: Affects the WebKit component, potentially causing unexpected Safari crashes. CVE-2020-24202: Affects the WebKit component, potentially causing unexpected process crashes. CVE-2020-24347: Affects the WebKit component, potentially causing memory corruption. CVE-2020-24348: Affects the WebKit component, potentially causing memory corruption. CVE-2020-24349: Affects the WebKit component, potentially causing memory corruption. CVE-2020-24350: Affects the WebKit component, potentially causing memory corruption. CVE-2020-24351: Affects the WebKit component, potentially causing memory corruption. CVE-2020-24352: Affects the WebKit component, potentially causing memory corruption. CVE-2020-24353: Affects the WebKit component, potentially causing memory corruption. CVE-2020-24354: Affects the WebKit component, potentially causing memory corruption.

Goal Reached Thanks to every supporter — we hit 100%!

Apple iOS/macOS October 2020 Security Update: Multiple CVEs in WebKit, Kernel, Safari