Code injection

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with kernel privileges...

Memory corruption

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges...

Memory corruption

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges...

Memory corruption

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

Buffer overflow

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbitrary code with kernel privileges...

Memory corruption

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8786

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8747

CVE-2019-8747 is a memory corruption vulnerability that Apple attributes to improved locking, allowing an attacker may run code with kernel privileges on affected Apple platforms. The primary public details in connected sources specify the issue as fixed in watchOS 6.1, with the Watch firmware up...

CVE-2019-8747

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8748

CVE-2019-8748 affects macOS Catalina 10.15 where a memory corruption issue in the kernel could let an attacker execute arbitrary code with kernel privileges. Apple’s HT210722/HT210634 entries confirm the vulnerability and its fix in Catalina 10.15.1 (and related security updates); remediation is ...

CVE-2019-8781

CVE-2019-8781 is a memory-corruption issue in macOS Catalina 10.15 that could let an attacker run arbitrary code with kernel privileges. The Red Hat and Apple security docs reference the same CVE and describe the fix as part of Catalina’s update, with Apple noting a fix via improved state/memory ...

CVE-2019-8717

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8694

CVE-2019-8694 describes a memory corruption issue in the Grapher component of macOS Mojave. The flaw could allow an attacker to execute arbitrary code with kernel privileges. Apple attributes the fix to macOS Mojave 10.14.6 (Security Update 2019-004 High Sierra/Sierra too) and notes that the issu...

CVE-2019-8694

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8590

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8529

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8590

CVE-2019-8590 affects macOS Mojave in the Application Firewall component, where a logic issue allowed an application to execute arbitrary code with kernel privileges. The issue is fixed in macOS Mojave 10.14.5. The available sources describe a kernel‑level impact under a local threat model, with ...

CVE-2019-7287

CVE-2019-7287 is described in the connected materials as a memory corruption/heap overflow in Apple iOS, arising from an unchecked memcpy in the IOKit ProvInfoIOKitUserClient::ucEncryptSUInfo() path. The initial description notes a memory corruption fix in iOS 12.1.4 and potential kernel code exe...

CVE-2019-7287

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-7287

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges. Recent assessments: gwillcox-r7 at November 22, 2020 2:38am UTC reported: Reported as exploited in the wild as pa...