CVE-2019-8663

CVE-2019-8663 is a memory-leak/memory-corruption issue tied to NSKeyedUnarchiver/NSSecureCoding handling in iOS/macOS (Core Data/NSKeyedArchiver paths). The vulnerability arises from the deserialization of the SGBigUTF8String subclass of NSString during remote data processing, which can produce a...

CVE-2019-8665

CVE-2019-8665 affects Apple iOS Messages and is listed as a denial-of-service issue resolved by the iOS 12.4 and watchOS 5.3 patches. The Connected Apple security content documents (HT210346 for watchOS 5.3 and HT210353 for iOS 12.4) describe an input/validation-related issue in Messages that cou...

CVE-2019-8649

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing...

CVE-2019-8649

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing...

CVE-2019-8583

Summary of CVE-2019-8583 : The vulnerability is a set of memory corruption issues in WebKit-related components that could be triggered by processing malicious web content, potentially leading to arbitrary code execution. The CVE is associated with Apple’s ecosystem and is addressed in multiple up...

CVE-2019-8585

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. Processing a maliciously crafted movie file may lead to arbitrary code execution...

CVE-2019-8624

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 5.3. A remote attacker may be able to leak memory...

CVE-2019-8576

CVE-2019-8576 is an out-of-bounds read in Apple’s Kernel component. A local user could cause system termination or read kernel memory. Fixes were issued in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, and watchOS 5.2.1 per Apple advisories; related CVE entries and vendor advisories confirm the kern...

CVE-2019-8576

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2019-8604

CVE-2019-8604 is a memory corruption vulnerability in macOS that could allow an application to execute arbitrary code with system privileges. The issue is fixed in macOS Mojave 10.14.5; users on earlier builds are affected. The vulnerability is local in scope and is addressed by Apple’s Mojave 10...

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...

CVE-2019-8560

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to read restricted memory...

CVE-2019-8597

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8551

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2019-8505

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting...

CVE-2019-8520

CVE-2019-8520 is an out-of-bounds read vulnerability in macOS that was addressed by improved bounds checking. The issue could allow a malicious application to read restricted memory and is fixed in macOS Mojave 10.14.4 (Security Update). The available sources consistently describe the fix as part...

CVE-2019-8519

CVE-2019-8519 is an out-of-bounds read vulnerability in macOS components that was mitigated by improved bounds checking. The issue could allow an application to read restricted memory and is addressed in macOS Mojave 10.14.4. Public references in the connected data confirm the root cause as an ou...

CVE-2019-7284

This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing...

CVE-2019-8646

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to leak memory. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

OPENSUSE-SU-2019:2565-1 Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues: Security issues fixed October 2019 CPU bsc1154212: - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Bette...