CVE-2019-8822

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

CVE-2019-8793

A consistency issue existed in deciding when to show the screen recording indicator. The issue was resolved with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2. A local user may be able to record the screen without a visible screen recording indicator...

CVE-2019-8789

The CVE-2019-8789 entry affects Apple Books in macOS Catalina (before 10.15.1), iOS, and iPadOS where a validation issue in handling symlinks could lead to disclosure of user information via a maliciously crafted iBooks file. Root cause: inadequate validation of symlinks within Books parsing. Imp...

CVE-2019-8789

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Parsing a maliciously crafted iBooks file may lead to disclosure of user information...

CVE-2019-8786

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8804

An inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in iOS 13.2 and iPadOS 13.2. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

CVE-2019-8804

CVE-2019-8804 affects Apple iOS/iPadOS Setup Assistant. The issue: an inconsistency in Wi‑Fi network configuration handling during device setup could allow an attacker in physical proximity to redirect a user to a malicious Wi‑Fi network. Root cause is a faulty state/network configuration flow wi...

CVE-2019-8795

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8786

CVE-2019-8786 is a memory corruption issue fixed by Apple in iOS 13.2 / iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1. The vulnerability could allow an application to execute arbitrary code with kernel privileges. Affected components include the system kernel and related subsyst...

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8782

CVE-2019-8782 is a WebKit-related memory corruption issue addressed by Apple in iOS 13.2, iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, and iCloud for Windows 11.0. The advisory notes multiple memory corruption vulnerabilities fixed across WebKit with improved memory handling...

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8795

CVE-2019-8795 is a memory corruption vulnerability affecting Apple AVE components (notably described as in Apple AVE drivers/AVEVideoEncoder family) that could allow arbitrary kernel code execution with system privileges. Apple attributes fixes to iOS 13.2 and iPadOS 13.2 (and tvOS 13.2) via impr...

CVE-2019-8793

CVE-2019-8793 is associated with a screen recording indicator consistency issue in Apple iOS/iPadOS. The authenticated root cause is a state-management inconsistency that could allow a local user to record the screen without a visible indicator. Apple fixed this in iOS 13.2 and iPadOS 13.2. Red H...

CVE-2019-8788

CVE-2019-8788 stems from an information-disclosure risk in Apple’s Associated Domains URL parsing. The issue arises from improper URL handling, potentially enabling data exfiltration. Publicly documented fixes indicate that this was addressed through improved input validation and is resolved in: ...

CVE-2019-8775

CVE-2019-8775 affects Apple iOS/iPadOS VoiceOver. The root issue allowed a user with physical access to read contacts from the lock screen. Apple addressed this by restricting options on a locked device, with fixes in iOS 13.1 and iPadOS 13.1. Connected sources (Red Hat advisory, Apple HT210603, ...

CVE-2019-8784

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8784

CVE-2019-8784 is a memory corruption vulnerability affecting WebKit-related components in Apple software. The public records show that an application could potentially execute arbitrary code with system privileges due to memory handling issues in WebKit used by Apple’s iCloud for Windows (7.15 an...

CVE-2019-8782

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...