CVE-2019-8704

An authentication issue was addressed with improved state management. This issue is fixed in tvOS 13. A local user may be able to leak sensitive user information...

CVE-2019-8705

CVE-2019-8705 describes a memory corruption issue in macOS/tvOS related to processing a maliciously crafted movie. The root cause is improved validation that prevents memory disclosure, addressing a vulnerability in the CoreAudio component (and related media pipelines) that could leak process mem...

CVE-2019-8698

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to restrict access to websites...

CVE-2019-8705

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15, tvOS 13. Processing a maliciously crafted movie may result in the disclosure of process memory...

CVE-2019-8704

CVE-2019-8704 affects Apple devices (notably the tvOS 13 update) in the Keyboards component, where an authentication/state-management issue could allow a local user to leak sensitive information. The descriptor shows the flaw as addressed with improved state management and fix in tvOS 13. The con...

CVE-2019-8698

CVE-2019-8698 affects Apple Profiles component entitlement verification. A validation issue could allow a malicious app to restrict access to websites. Apple fixed the issue in iOS 12.4 and tvOS 12.4; remediation is updating to these versions. The surrounding Apple security documentation explicit...

CVE-2019-8677

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...

CVE-2019-8684

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...

CVE-2019-8683

CVE-2019-8683 is a WebKit-related memory-corruption issue attributed to lokihardt (Google Project Zero) and addressed by Apple in WebKit updates. Affected components: WebKit on iOS, macOS (Safari/WebKit), watchOS/tvOS; affected platforms include iOS 12.x, macOS Mojave 10.14.x, Safari 12.x, and co...

CVE-2019-8679

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...

CVE-2019-8689

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...

CVE-2019-8686

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...

CVE-2019-8690

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously...

CVE-2019-8681

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...

CVE-2019-8717

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8680

CVE-2019-8680 is a WebKitGTK/WebKit memory‑corruption issue addressed in upstream WebKitGTK/WebKit. The connected advisory (ALAS2-2020-1563) confirms multiple memory corruption flaws in WebKitGTK/WebKit and lists the fix as WebKitGTK4 2.28.2 (and related devel/jsc packages) for Amazon Linux 2. Th...

CVE-2019-8717

CVE-2019-8717 describes a memory corruption vulnerability in macOS kernel components that could allow an attacker with local access to execute arbitrary code with kernel privileges. The issue is addressed with improved memory handling and/or state management and is fixed in macOS Catalina 10.15 a...

CVE-2019-8684

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...

CVE-2019-8688

CVE-2019-8688 corresponds to multiple memory corruption issues in Apple's WebKit/WebKit-derived components. The initial document states these issues are fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, and related Windows/iCloud components, with the impact described...

CVE-2019-8686

CVE-2019-8686 is a memory corruption issue associated with WebKit/WebKitGTK family that Apple and multiple Linux advisories linked to, fixed in Apple platforms (iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2) and WebKitGTK-based packages (e.g., webkitgtk4 2.28.2 in AL2/CentOS advisories...