CVE-2019-8854

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. A device may be passively tracked by its Wi-Fi MAC address...

CVE-2019-8825

CVE-2019-8825 is a memory corruption vulnerability in Apple's CoreMedia framework, triggered while processing malicious web content. Public documentation across Apple security pages (HT210634) and Red Hat's CVE entry confirms the issue can lead to arbitrary code execution and memory corruption. A...

CVE-2019-8825

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 10.7, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing...

CVE-2019-8756

CVE-2019-8756 involves multiple memory corruption issues, primarily in libxml2, addressed by improved input validation. Apple and related platforms list the fix across several updates: macOS Catalina 10.15 and 10.15.1, iOS 13, iCloud for Windows 7.14 and 10.7, tvOS 13, watchOS 6, and iTunes 12.10...

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2019-8749

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10....

CVE-2019-8744

A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iOS 13. A malicious...

CVE-2019-8744

CVE-2019-8744 describes a memory corruption issue in the handling of IPv6 packets that could allow a malicious application to determine kernel memory layout. The vulnerability is addressed in Apple platforms via patches in macOS Catalina 10.15, macOS Catalina 10.15.1, tvOS 13, watchOS 6, and iOS ...

CVE-2019-8753

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. Processing maliciously crafted web content may lead to a cross site scripting attack...

CVE-2019-8753

CVE-2019-8753 affects CFNetwork in Apple platforms (macOS Catalina 10.15, iOS 13, watchOS 6, tvOS 13). Description: processing maliciously crafted web content may lead to a cross-site scripting (XSS) vulnerability. Root cause: inadequate checks in CFNetwork that allowed script execution when hand...

CVE-2019-8728

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code executi...

CVE-2019-8732

CVE-2019-8732 affects iOS and was remedied in iOS 13. The issue caused deleted calls to remain visible on the device due to data handling during deletion, and Apple implemented an improved data deletion mechanism in iOS 13 to address it. Public references across multiple feeds (NVD/NVD listing, R...

CVE-2019-8732

The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device...

CVE-2019-8746

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows...

CVE-2019-8746

CVE-2019-8746 is an out-of-bounds read vulnerability that Apple documents as addressed by improved input validation. The CVE affects multiple Apple platforms in the 2019 timeframe, with specific fixes noted for macOS Catalina 10.15 and 10.15.1, iOS 13, tvOS 13, watchOS 6, iCloud for Windows 7.14/...

CVE-2019-8712

CVE-2019-8712 is a memory corruption vulnerability reported in Apple OS kernels that could allow an app to execute arbitrary code with system privileges. The description notes a fix through improved memory handling, with patches in watchOS 6, iOS 13, and tvOS 13. Connected documents corroborate k...

CVE-2019-8712

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8718

CVE-2019-8718 is an IOUSBDeviceFamily memory corruption vulnerability in Apple devices. The issue could allow an attacker to execute arbitrary code with kernel privileges via a local exploit, as described in Apple advisories. Affected components include IOUSBDeviceFamily on iOS/watchOS/tvOS; root...

CVE-2019-8718

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...