9065 matches found
CVE-2019-8668
CVE-2019-8668 affects Apple’s image processing path and can cause a denial-of-service when processing a maliciously crafted image. The issue is fixed in iOS 12.4, tvOS 12.4, and watchOS 5.3. Affected products involve iPhone/iPad/iPod touch platforms running iOS and corresponding Apple TV and Appl...
CVE-2019-8709
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iOS 13. An application may be able to execute arbitrary code with kernel...
CVE-2019-8709
CVE-2019-8709 is a memory-corruption issue in Apple platforms that may allow an application to execute arbitrary code with kernel privileges. Concrete details from connected documents indicate this affects macOS (kernel), and that patches are provided in macOS Catalina 10.15, macOS Catalina 10.15...
CVE-2019-8633
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, tvOS 12.3, watchOS 5.3. An application may be able to read restricted memory...
CVE-2019-8612
A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, tvOS 12.3, watchOS 5.2.1, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iO...
CVE-2019-8612
CVE-2019-8612 is a logic issue in the Wi‑Fi/driver state handling in Apple’s ecosystem. The vulnerability allows an attacker with privileged network access to modify driver state, potentially affecting devices across macOS (Sierra/High Sierra/Mojave and newer macOS updates) and related Apple plat...
CVE-2019-8631
The CVE-2019-8631 entry describes a logic issue in state management that affects Apple messaging components. Affected products include macOS Mojave 10.14.5, Security Update 2019-003 for High Sierra, and Security Update 2019-003 for Sierra, as well as iOS 12.3 and tvOS 12.3. The underlying flaw al...
CVE-2019-8631
A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, tvOS 12.3. Users removed from an iMessage conversation may still be able to alter state...
CVE-2019-8570
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, iCloud for Windows 7.10, iTunes 12.9.3 for Windows, Safari 12.0.3, tvOS 12.1.2. Processing maliciously crafted web content may disclose sensitive user information...
CVE-2019-8570
CVE-2019-8570: A logic issue in processing malicious web content could disclose sensitive user information. Apple documents associate this with WebKit/Web content handling across iOS, iPadOS, macOS Safari, tvOS, and iCloud/iTunes windows components. Concrete details in connected records show the ...
CVE-2019-8592
CVE-2019-8592 is a CoreAudio memory-corruption issue in Apple platforms. The vulnerability could be triggered by playing a malicious audio file, potentially enabling arbitrary code execution. The issue is fixed across multiple Apple OS updates, including macOS Catalina 10.15 and 10.15.1, macOS Mo...
CVE-2019-8592
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra,...
CVE-2019-8582
CVE-2019-8582 is an out-of-bounds read vulnerability in font handling fixed by improved bounds checking in CoreText. Affected are Apple platforms/releases including tvOS 12.3, iOS 12.3, macOS Mojave 10.14.5, Security Update 2019-003 for High Sierra and Sierra, iTunes 12.9.5 for Windows, iCloud fo...
CVE-2019-8582
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iCloud for Windows 7.12, tvOS 12.3, iTunes 12.9.5 for Windows, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3. Processing a maliciously crafted font may...
CVE-2018-4474
CVE-2018-4474 is a memory consumption issue addressed by improved memory handling. Connected sources confirm the flaw affects multiple Apple platforms and components and is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, and tvOS 12. The Red Hat advisory mi...
CVE-2018-4474
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure...
CVE-2018-4448
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.1.1, watchOS 5.1.2, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update...
CVE-2018-4448
CVE-2018-4448 is a kernel memory initialization issue resolved by Apple across multiple OS lines. The root cause was a memory handling flaw that could allow a local attacker to read kernel memory. Affected products include macOS (Sierra/High Sierra/Mojave families), iOS, watchOS, and tvOS. The fi...
CVE-2018-4433
CVE-2018-4433 describes a configuration issue that could allow a malicious application to modify protected parts of the file system. The entry is fixed by Apple in macOS Mojave 10.14.4 and Security Update 2019-002 for High Sierra and Sierra, as well as in watchOS 5, iOS 12, and tvOS 12. Public re...