The version of Apple iOS running on the mobile device is prior to 12.4.9. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state     management. This issue is fixed in iOS 12.4.9. A user may send video in Group FaceTime calls without knowing that     they have done so. (CVE-2020-27929)

  - A memory corruption issue was addressed with improved input validation. Processing a maliciously crafted font may     lead to arbitrary code execution. (CVE-2020-27930)

  - A malicious application may be able to execute arbitrary code with kernel privileges. (CVE-2020-27932)

  - A memory initialization issue was addressed. A malicious application may be able to disclose kernel memory.     (CVE-2020-27950)

The version of Apple iOS running on the mobile device is prior to 14.2. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-006 High Sierra, or 10.14.x prior to 10.14.6 Security Update 2020-006 Mojave. It is, therefore, affected by multiple vulnerabilities :

  - Processing a maliciously crafted font may lead to arbitrary code execution. (CVE-2020-27930)

  - A malicious application may be able to execute arbitrary code with kernel privileges. (CVE-2020-27932)

  - A malicious application may be able to disclose kernel memory. (CVE-2020-27950)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.0.x prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities, including the following:

  - An out-of-bounds write issue that can lead to unexpected application termination or arbitrary code     execution when opening a maliciously crafted PDF file. (CVE-2020-9876)

  - An out-of-bounds write caused by insufficient input validation that can lead to arbitrary code execution     when processing a maliciously crafted image. (CVE-2020-9883)

  - A remote attacker may be able to unexpectedly alter the Mail application date due to insufficient checks.
    (CVE-2020-9941)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
145550	Apple iOS < 12.4.9 Multiple Vulnerabilities	Nessus	Mobile Devices	1/29/2021	4/8/2024	high
142881	Apple iOS < 14.2 Multiple Vulnerabilities	Nessus	Mobile Devices	11/13/2020	4/8/2024	high
143478	macOS 10.13.x < 10.13.6 Security Update 2020-006 / 10.14.x < 10.14.6 Security Update 2020-006 (HT211946)	Nessus	MacOS X Local Security Checks	12/4/2020	4/25/2023	high
143115	macOS 11.0.x < 11.0.1	Nessus	MacOS X Local Security Checks	11/19/2020	4/25/2023	high

Detections

Analytics

Plugins Search

high

high

high

high