CVE-2019-8624

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 5.3. A remote attacker may be able to leak memory...

CVE-2019-8577

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges...

CVE-2019-8623

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8585

CVE-2019-8585 concerns Apple CoreAudio: an out-of-bounds read was triggered while processing a maliciously crafted movie file, leading to potential arbitrary code execution. Root cause: insufficient input validation in CoreAudio handling; fixed by improved input validation. Affected/affected upda...

CVE-2019-8583

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8624

CVE-2019-8624 is an out-of-bounds read vulnerability in the Digital Touch component of watchOS that affected Apple Watch and was fixed in watchOS 5.3. Apple’s advisory notes improved input validation as the fix, and CNVD-2020-14266 also describes a Digital Touch buffer/overflow issue resolved by ...

CVE-2019-8622

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8577

CVE-2019-8577 affects Apple platforms via SQLite. Root cause: input validation issue addressed by improved memory handling. Fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12. Impact: an application may be able to gain elevate...

CVE-2019-8626

CVE-2019-8626 is an input validation issue addressed in iOS 12.3 and watchOS 5.2.1. Apple’s advisories tie it to the Mail component, where processing a maliciously crafted message may lead to a denial of service. The linked documents confirm the vulnerability class as an input validation problem ...

CVE-2019-8626

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service...

CVE-2019-8583

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8563

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8623

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8622

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8622

CVE-2019-8622 is a WebKit memory-corruption issue affecting Apple platforms (iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, etc.). The vulnerability can lead to arbitrary code execution when processing malicious web content. Remediation is to upgrade to the patched WebKi...

CVE-2019-8568

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system...

CVE-2019-8563

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8601

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8598

CVE-2019-8598 is an input-validation issue identified in Apple platforms. The supplied documents show the vulnerability affecting Apple iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12, with the impact described as a malicious applic...

CVE-2019-8620

CVE-2019-8620 describes a user privacy issue in Apple’s Wi‑Fi component where a device may be passively tracked by its Wi‑Fi MAC address. The underlying fix was to remove the broadcast MAC address, mitigating tracking risk. Public documentation indicates the vulnerability affects iOS, tvOS, and w...