CVE-2019-8780

CVE-2019-8780 is a kernel-permissions logic vulnerability in Apple’s iOS/iPadOS kernel component that could allow a malicious app to determine the kernel memory layout. The issue is described as a memory corruption/permission logic problem and is fixed in iOS 13.1 and iPadOS 13.1 (and tvOS 13). R...

CVE-2019-8825

CVE-2019-8825 is a memory corruption vulnerability in Apple's CoreMedia framework, triggered while processing malicious web content. Public documentation across Apple security pages (HT210634) and Red Hat's CVE entry confirms the issue can lead to arbitrary code execution and memory corruption. A...

CVE-2019-8825

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 10.7, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing...

CVE-2019-8809

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6, iOS 13. A local app may be able to read a persistent account identifier...

CVE-2019-8799

CVE-2019-8799 affects Apple’s mDNSResponder across Apple platforms (iOS/iPadOS, macOS Catalina, watchOS, tvOS). Root cause: AWDL communications may disclose device names to nearby observers. Resolution: devices updated to replace device names with a random identifier; fixed in iOS 13.1/iPadOS 13....

CVE-2019-8756

CVE-2019-8756 involves multiple memory corruption issues, primarily in libxml2, addressed by improved input validation. Apple and related platforms list the fix across several updates: macOS Catalina 10.15 and 10.15.1, iOS 13, iCloud for Windows 7.14 and 10.7, tvOS 13, watchOS 6, and iTunes 12.10...

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2019-8749

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10....

CVE-2019-8744

CVE-2019-8744 describes a memory corruption issue in the handling of IPv6 packets that could allow a malicious application to determine kernel memory layout. The vulnerability is addressed in Apple platforms via patches in macOS Catalina 10.15, macOS Catalina 10.15.1, tvOS 13, watchOS 6, and iOS ...

CVE-2019-8744

A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iOS 13. A malicious...

CVE-2019-8753

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. Processing maliciously crafted web content may lead to a cross site scripting attack...

CVE-2019-8753

CVE-2019-8753 affects CFNetwork in Apple platforms (macOS Catalina 10.15, iOS 13, watchOS 6, tvOS 13). Description: processing maliciously crafted web content may lead to a cross-site scripting (XSS) vulnerability. Root cause: inadequate checks in CFNetwork that allowed script execution when hand...

CVE-2019-8728

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code executi...

CVE-2019-8732

CVE-2019-8732 affects iOS and was remedied in iOS 13. The issue caused deleted calls to remain visible on the device due to data handling during deletion, and Apple implemented an improved data deletion mechanism in iOS 13 to address it. Public references across multiple feeds (NVD/NVD listing, R...

CVE-2019-8732

The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device...

CVE-2019-8746

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows...

CVE-2019-8746

CVE-2019-8746 is an out-of-bounds read vulnerability that Apple documents as addressed by improved input validation. The CVE affects multiple Apple platforms in the 2019 timeframe, with specific fixes noted for macOS Catalina 10.15 and 10.15.1, iOS 13, tvOS 13, watchOS 6, iCloud for Windows 7.14/...

CVE-2019-8740

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8740

CVE-2019-8740 is a memory corruption vulnerability in Apple’s kernel components. The vulnerability allows an application to potentially execute arbitrary code with kernel privileges. Apple fixes this in iOS 13.1/iPadOS 13.1, watchOS 6, and tvOS 13 by improving locking in the related kernel code. ...