CVE-2019-8734

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code executi...

CVE-2019-8706

CVE-2019-8706 is a memory corruption issue in Apple’s audio stack (CoreAudio) that is triggered by processing a maliciously crafted audio file. Root cause: memory corruption in the audio processing path. Affected: macOS/macOS Catalina, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6; fixes implement...

CVE-2019-8668

CVE-2019-8668 affects Apple’s image processing path and can cause a denial-of-service when processing a maliciously crafted image. The issue is fixed in iOS 12.4, tvOS 12.4, and watchOS 5.3. Affected products involve iPhone/iPad/iPod touch platforms running iOS and corresponding Apple TV and Appl...

CVE-2019-8668

A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. Processing a maliciously crafted image may lead to a denial of service...

CVE-2019-8709

CVE-2019-8709 is a memory-corruption issue in Apple platforms that may allow an application to execute arbitrary code with kernel privileges. Concrete details from connected documents indicate this affects macOS (kernel), and that patches are provided in macOS Catalina 10.15, macOS Catalina 10.15...

CVE-2019-8638

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 5.2, iCloud for Windows 7.11, iOS 12.2, iTunes 12.9.4 for Windows, Safari 12.1. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8638

CVE-2019-8638 is a memory corruption issue in WebKit-related components triggered by processing malicious web content, leading to arbitrary code execution. The CVE affects multiple Apple platforms and products, with fixes shipped in: iOS 12.2, watchOS 5.2, Safari 12.1, iCloud for Windows 7.11, an...

CVE-2019-8633

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, tvOS 12.3, watchOS 5.3. An application may be able to read restricted memory...

CVE-2019-8612

A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, tvOS 12.3, watchOS 5.2.1, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iO...

CVE-2019-8612

CVE-2019-8612 is a logic issue in the Wi‑Fi/driver state handling in Apple’s ecosystem. The vulnerability allows an attacker with privileged network access to modify driver state, potentially affecting devices across macOS (Sierra/High Sierra/Mojave and newer macOS updates) and related Apple plat...

CVE-2019-8639

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 5.2, iCloud for Windows 7.11, iOS 12.2, iTunes 12.9.4 for Windows, Safari 12.1. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8639

CVE-2019-8639 involves multiple memory corruption issues in Apple software. The fixed products/versions include watchOS 5.2, iOS 12.2, iCloud for Windows 7.11, iTunes 12.9.4 for Windows, Safari 12.1, and WebKit-related components. The described impact is that processing maliciously crafted web co...

CVE-2019-8592

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra,...

CVE-2019-8592

CVE-2019-8592 is a CoreAudio memory-corruption issue in Apple platforms. The vulnerability could be triggered by playing a malicious audio file, potentially enabling arbitrary code execution. The issue is fixed across multiple Apple OS updates, including macOS Catalina 10.15 and 10.15.1, macOS Mo...

CVE-2019-8547

CVE-2019-8547 is an out-of-bounds read vulnerability that could disclose kernel memory due to improper input validation. The issue affects Apple platforms and was addressed via multiple updates: macOS Mojave 10.14.5, Security Update 2019-003 for High Sierra and Sierra, watchOS 5.2, macOS Mojave 1...

CVE-2019-8547

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, watchOS 5.2, macOS Mojave 10.14.4, Security Updat...

CVE-2019-8573

An input validation issue was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause a system denial of service...

CVE-2019-8573

CVE-2019-8573 is an input-validation vulnerability that Apple fixed across multiple updates. The advisory track shows the issue being addressed by macOS Mojave 10.14.5, High Sierra and Sierra Security Updates 2019-003, iOS 12.3, and watchOS 5.2.1, with a remote attacker potentially causing a deni...

CVE-2019-8538

A denial of service issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. Processing a maliciously crafted vcf file may lead to a denial of service...

CVE-2019-8538

CVE-2019-8538 affects multiple Apple platforms (watchOS 5.2; macOS Mojave 10.14.4; Security Update 2019-002 for High Sierra/Sierra; iOS 12.2). Root cause: processing a specially crafted vcf file may trigger a denial of service due to inadequate input validation. Apple credits updated validation t...