8045 matches found
CVE-2019-8647
CVE-2019-8647 is a use-after-free vulnerability that was addressed with improved memory management and is fixed in iOS 12.4, tvOS 12.4, and watchOS 5.3. The CVE entry notes that a remote attacker may have been able to cause arbitrary code execution. Apple’s advisories (HT210346/HT210351/HT210353)...
CVE-2019-8647
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution...
CVE-2019-8661
CVE-2019-8661 is a macOS Mojave (10.14.x) issue fixed in 10.14.6. It describes a use-after-free in NSURL initWithCoder during deserialization of bookmark/alias data (Mac path via CarbonCore), which can lead to memory corruption and remote code execution. Apple/Apple Support entries indicate the f...
EUVD-2019-17995
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges...
CVE-2019-8605
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges...
CVE-2019-8605
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges...
CVE-2019-8605
CVE-2019-8605 is a use-after-free vulnerability in Apple’s XNU kernel (iOS, macOS, tvOS, watchOS) that could allow a malicious app to execute arbitrary code with system privileges. The initial description notes a use-after-free that was fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, and watc...
CVE-2019-8613
CVE-2019-8613 is a use-after-free in the iOS Mail Message Framework (IMAP/NAMESPACE handling) that can lead to arbitrary code execution. It was fixed in iOS 12.3, tvOS 12.3, and watchOS 5.2.1. The vulnerability arises during deserialization/processing of IMAP namespace data, creating memory corru...
CVE-2019-8556
CVE-2019-8556 is a use-after-free vulnerability in WebKit related to processing malicious web content. It could lead to arbitrary code execution. Affected products/versions include iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The issue is fixed in thos...
CVE-2019-8537
An access issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to view a user’s locked notes...
CVE-2019-8556
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...
CVE-2019-8537
CVE-2019-8537 relates to an access issue in macOS Notes where memory-management improvements fix a vulnerability that could allow a local user to view a user’s locked notes. The fix is implemented in macOS Mojave 10.14.4. The Red Hat and Apple vulnerability entries corroborate that the issue is r...
CVE-2019-8526
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges...
CVE-2019-8526
CVE-2019-8526 is a use-after-free vulnerability in macOS Mojave that could allow a locally authenticated attacker to gain elevated privileges. The issue was addressed with improved memory management and is fixed in macOS Mojave 10.14.4. The CVSS data (3.1) indicates HIGH impact on confidentiality...
CVE-2019-7285
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...
CVE-2019-7285
CVE-2019-7285 technical details are not publicly provided in the supplied connected documents. Sources mention a use-after-free memory issue fixed in iOS 12.2 and related products, but root-cause, affected versions, or precise exploit info are not given here. Monitor for updates.
CVE-2019-7285
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...
CVE-2019-8605
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges. Recent assessments: Assessed Attacker Value: 0 Assessed...
CVE-2019-8526
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2019-7285
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...