9060 matches found
CVE-2019-8657
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. Parsing a maliciously crafted office document may lead to an unexpected application termination or arbitrary code execution...
CVE-2019-8666
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...
CVE-2019-8658
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal...
CVE-2019-8672
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...
CVE-2019-8673
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...
CVE-2019-8647
CVE-2019-8647 is a use-after-free vulnerability that was addressed with improved memory management and is fixed in iOS 12.4, tvOS 12.4, and watchOS 5.3. The CVE entry notes that a remote attacker may have been able to cause arbitrary code execution. Apple’s advisories (HT210346/HT210351/HT210353)...
CVE-2019-8666
CVE-2019-8666 is a WebKit memory corruption vulnerability affecting Apple platforms. The issue is described as memory handling improvements addressing multiple memory corruption flaws, with the impact that processing maliciously crafted web content may lead to arbitrary code execution. Apple’s ad...
CVE-2019-8660
CVE-2019-8660 is a memory corruption issue that Apple fixed by improving input validation. The vulnerability could allow a remote attacker to cause an application termination or arbitrary code execution. It is addressed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, and watchOS 5.3, per NVD detail...
CVE-2019-8648
CVE-2019-8648 is a memory corruption issue that was addressed with improved input validation. The vulnerability is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, and watchOS 5.3. A remote attacker may be able to cause arbitrary code execution. The initial description does not specify the vul...
CVE-2019-8666
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...
CVE-2019-8657
CVE-2019-8657 affects Apple operating systems (iOS 12.4; macOS Mojave 10.14.6; tvOS 12.4; watchOS 5.3). The issue is an out-of-bounds read resolved by improved input validation, triggered while parsing a maliciously crafted office document; implications include unexpected termination or arbitrary...
CVE-2019-8673
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...
CVE-2019-8637
CVE-2019-8637 is an Apple iOS/watchOS/tvOS vulnerability: an input validation issue could allow a malicious app to gain root privileges. Affected: Apple platforms with this CVE entry are fixed in iOS 12.3, tvOS 12.3, and watchOS 5.2.1; the vulnerability is addressed by improved input validation. ...
CVE-2019-8646
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to leak memory...
CVE-2019-8647
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution...
CVE-2019-8660
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution...
CVE-2019-8637
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges...
CVE-2019-8662
This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary...
CVE-2019-8658
CVE-2019-8658 is a logic issue in WebKit/Apple WebKit that could lead to universal cross-site scripting when processing malicious web content. The patch set fixes the issue in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13...
CVE-2019-8649
CVE-2019-8649 concerns a logic issue in how synchronous page loads are handled within WebKit components. The flaw could enable universal cross-site scripting when processing malicious web content. Reports indicate the fix was implemented via improved state management and is addressed in Apple upd...