About the security content of macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2019-11043PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
• CVE-2020-3837Apple Multiple Products Memory Corruption Vulnerability
• CVE-2019-18634In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process
• CVE-2020-9774An issue existed with Siri Suggestions access to encrypted data
• CVE-2020-3845A memory corruption issue was addressed with improved memory handling
• CVE-2020-3880An out-of-bounds read was addressed with improved input validation
• CVE-2020-3846A buffer overflow was addressed with improved size validation
• CVE-2020-3855An access issue was addressed with improved access restrictions
• CVE-2020-3877A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2020-3851A use after free issue was addressed with improved memory management
• CVE-2020-3863A memory corruption issue was addressed with improved memory handling
• CVE-2020-3857A memory corruption issue was addressed with improved memory handling
• CVE-2020-3854A memory corruption issue was addressed with improved memory handling
• CVE-2020-3875A validation issue was addressed with improved input sanitization
• CVE-2020-3878An out-of-bounds read was addressed with improved input validation
• CVE-2020-3853A type confusion issue was addressed with improved memory handling
• CVE-2020-3849A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2020-3836An access issue was addressed with improved memory management
• CVE-2020-3856A memory corruption issue was addressed with improved input validation
• CVE-2020-3829An out-of-bounds read was addressed with improved bounds checking
• CVE-2020-3830A validation issue existed in the handling of symlinks
• CVE-2020-3871A memory corruption issue was addressed with improved memory handling
• CVE-2020-3870An out-of-bounds read was addressed with improved input validation
• CVE-2020-3835A validation issue existed in the handling of symlinks
• CVE-2020-3848A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2020-3872A memory initialization issue was addressed with improved memory handling
• CVE-2020-3850A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2020-3838The issue was addressed with improved permissions logic
• CVE-2020-3839A validation issue was addressed with improved input sanitization
• CVE-2020-3847A remote attacker may be able to leak memory
• CVE-2020-3866Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper
• CVE-2020-3843A remote attacker may be able to cause unexpected system termination or corrupt kernel memory
• CVE-2020-3840An off by one issue existed in the handling of racoon configuration files
• CVE-2020-3827A memory corruption issue was addressed with improved input validation
• CVE-2020-3842A memory corruption issue was addressed with improved memory handling
• CVE-2020-3826An out-of-bounds read was addressed with improved input validation

Source and provenance

Original title: About the security content of macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra - Apple Support. Captured 16 Oct 2026, 15:22 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.