CVE-2019-8789

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Parsing a maliciously crafted iBooks file may lead to disclosure of user information...

CVE-2019-8804

An inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in iOS 13.2 and iPadOS 13.2. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

CVE-2019-8786

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8795

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8782

CVE-2019-8782 is a WebKit-related memory corruption issue addressed by Apple in iOS 13.2, iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, and iCloud for Windows 11.0. The advisory notes multiple memory corruption vulnerabilities fixed across WebKit with improved memory handling...

CVE-2019-8786

CVE-2019-8786 is a memory corruption issue fixed by Apple in iOS 13.2 / iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1. The vulnerability could allow an application to execute arbitrary code with kernel privileges. Affected components include the system kernel and related subsyst...

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8775

CVE-2019-8775 affects Apple iOS/iPadOS VoiceOver. The root issue allowed a user with physical access to read contacts from the lock screen. Apple addressed this by restricting options on a locked device, with fixes in iOS 13.1 and iPadOS 13.1. Connected sources (Red Hat advisory, Apple HT210603, ...

CVE-2019-8784

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8784

CVE-2019-8784 is a memory corruption vulnerability affecting WebKit-related components in Apple software. The public records show that an application could potentially execute arbitrary code with system privileges due to memory handling issues in WebKit used by Apple’s iCloud for Windows (7.15 an...

CVE-2019-8795

CVE-2019-8795 is a memory corruption vulnerability affecting Apple AVE components (notably described as in Apple AVE drivers/AVEVideoEncoder family) that could allow arbitrary kernel code execution with system privileges. Apple attributes fixes to iOS 13.2 and iPadOS 13.2 (and tvOS 13.2) via impr...

CVE-2019-8793

CVE-2019-8793 is associated with a screen recording indicator consistency issue in Apple iOS/iPadOS. The authenticated root cause is a state-management inconsistency that could allow a local user to record the screen without a visible indicator. Apple fixed this in iOS 13.2 and iPadOS 13.2. Red H...

CVE-2019-8788

CVE-2019-8788 stems from an information-disclosure risk in Apple’s Associated Domains URL parsing. The issue arises from improper URL handling, potentially enabling data exfiltration. Publicly documented fixes indicate that this was addressed through improved input validation and is resolved in: ...

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...

CVE-2019-8779

This CVE (CVE-2019-8779) affects Apple iOS/iPadOS sandbox components, specifically third-party app extensions where incorrect sandbox restrictions were applied due to a logic issue. The issue is addressed in iOS 13.1.1 and iPadOS 13.1.1, which update the logic to enforce the correct restrictions....

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...

CVE-2019-8779

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions...