CVE-2019-8764

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges...

Authentication flaw

An authentication issue was addressed with improved state management. This issue is fixed in tvOS 13. A local user may be able to leak sensitive user information...

Authentication flaw

An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials...

Authentication flaw

An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account...

Cross site scripting

A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal...

UBUNTU-CVE-2019-8764

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2019-8813

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2019-8803

An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials...

CVE-2019-8719

CVE-2019-8719 is a logic issue related to improved state management that could enable a universal cross-site scripting (XSS) scenario when processing malicious web content. The entry notes a fixed state in updated products: tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, and iCloud ...

CVE-2019-8719

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2019-8793

CVE-2019-8793 is associated with a screen recording indicator consistency issue in Apple iOS/iPadOS. The authenticated root cause is a state-management inconsistency that could allow a local user to record the screen without a visible indicator. Apple fixed this in iOS 13.2 and iPadOS 13.2. Red H...

CVE-2019-8764

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2019-8739

A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution...

CVE-2019-8727

A logic issue was addressed with improved state management. This issue is fixed in iOS 13. Visiting a malicious website may lead to address bar spoofing...

CVE-2019-8699

A logic issue existed in the handling of answering phone calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4. The initiator of a phone call may be able to cause the recipient to answer a simultaneous Walkie-Talkie connection...

CVE-2019-8727

CVE-2019-8727 affects Safari on iOS prior to patch; a logic issue with state management in Safari’s address bar allows spoofing when visiting a malicious site. Fixed in iOS 13. Impact is limited to address bar spoofing; remediation is OS update (iOS 13+). Exploitation details are not provided bey...

CVE-2019-8704

CVE-2019-8704 affects Apple devices (notably the tvOS 13 update) in the Keyboards component, where an authentication/state-management issue could allow a local user to leak sensitive information. The descriptor shows the flaw as addressed with improved state management and fix in tvOS 13. The con...

CVE-2019-8764

CVE-2019-8764 is a logic-issue vulnerability reported in WebKit that manifests as universal cross-site scripting when processing malicious web content. The associated connected documentation shows this CVE linked to watchOS 6.1, where the fix is described as an improvement in state management, ad...