CVE-2019-8794

CVE-2019-8794 is a kernel validation issue described as a memory read access risk that can be triggered via an input sanitization vulnerability. The provided documents consistently state that the issue is fixed in iOS 13.2, iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1, and that...

CVE-2019-8789

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Parsing a maliciously crafted iBooks file may lead to disclosure of user information...

CVE-2019-8802

CVE-2019-8802 is a local privilege-escalation vulnerability in macOS Catalina prior to 10.15.1 affecting the manpages component. The issue is described as a validation flaw that could allow a malicious application to gain root privileges. Apple’s security advisory HT210722 notes that Catalina 10....

CVE-2019-8805

CVE-2019-8805 is a macOS Catalina 10.15.1 Security Update issue. A validation flaw in the entitlement verification could allow an application to execute arbitrary code with system privileges via the process entitlement check. The fix is included in macOS Catalina 10.15.1. CVSS details from NVD in...

CVE-2019-8802

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious application may be able to gain root privileges...

CVE-2019-8698

CVE-2019-8698 affects Apple Profiles component entitlement verification. A validation issue could allow a malicious app to restrict access to websites. Apple fixed the issue in iOS 12.4 and tvOS 12.4; remediation is updating to these versions. The surrounding Apple security documentation explicit...

CVE-2019-8693

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory...

CVE-2019-8692

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory...

CVE-2019-8692

CVE-2019-8692 describes a validation issue in macOS Mojave that could allow an application to read restricted memory due to improved input sanitization. The vulnerability affects macOS Mojave peers and is fixed in macOS Mojave 10.14.6 (Security Update 2019-004 High Sierra/Sierra packaging include...

CVE-2019-8691

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory...

CVE-2019-8691

CVE-2019-8691 affects macOS Mojave 10.14.x in the Graphics Drivers component. The issue is described as a validation/input sanitization failure that could allow an application to read restricted memory. Apple notes the fix is included in macOS Mojave 10.14.6 (Security Update 2019-004 High Sierra/...

CVE-2019-8568

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system...

CVE-2019-8568

CVE-2019-8568 affects Apple's platforms (iOS, macOS, tvOS, watchOS). Description shows a validation issue in the handling of symlinks, enabling a local user to modify protected parts of the file system. Affected products include iOS/iPhone, macOS Mojave, tvOS, and watchOS, with the fix implemente...

CVE-2019-8606

CVE-2019-8606 is an IOKit-related vulnerability in macOS Mojave prior to 10.14.5, where a validation issue in handling symlinks could allow a local user to load unsigned kernel extensions. Apple’s security content notes this was addressed with improved symlink validation, with the fix present in ...

CVE-2019-8603

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5. An application may be able to read restricted memory...

CVE-2019-8603

CVE-2019-8603 describes a validation issue in Apple macOS Mojave’s Accessibility Framework that could allow reading restricted memory due to improved input sanitization not being applied in certain paths. Affected: macOS Mojave 10.14.x prior to 10.14.5. Root cause: input validation/sanitization g...

CVE-2019-8606

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.5. A local user may be able to load unsigned kernel extensions...

CVE-2019-8516

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service...

CVE-2019-7292

CVE-2019-7292 involves a validation issue that could lead to disclosure of process memory when processing malicious web content. Public references in the provided documents indicate fixes in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The...

CVE-2019-7292

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory...