CVE-2019-8503

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website...

CVE-2019-6204

CVE-2019-6204 affects Safari Reader in iOS 12.2 and Safari 12.1. Root cause described as a logic/validation issue; exploitation could arise from enabling Safari Reader on a maliciously crafted webpage, leading to universal cross-site scripting. Remediation: patched in iOS 12.2 and Safari 12.1. Ot...

CVE-2019-6204

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting...

PT-2019-19209

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.1.1 iPadOS versions prior to 13.1.1 Description A logic issue applied the incorrect restrictions, which may affect third party app extensions by not receiving the correct sandbox restrictions. This issue was addressed ...

PT-2019-19107

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.5 Description A logic issue was addressed with improved restrictions, allowing an application to potentially execute arbitrary code with kernel privileges. Recommendations For versions prior to 10.14.5, update to...

CVE-2019-11131: Undefined Security Weakness

Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-8514: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges...

CVE-2019-8561: Improper Input Validation

A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to elevate privileges...

PT-2019-19064

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 macOS Mojave versions prior to 10.14.4 tvOS versions prior to 12.2 watchOS versions prior to 5.2 Description A logic issue was addressed with improved state management, which could allow an application to gain elevat...

PT-2019-19198

Name of the Vulnerable Software and Affected Versions Safari versions prior to 13.0.1 iOS versions prior to 13.1 iPadOS versions prior to 13.1 iCloud for Windows versions prior to 10.7 iCloud for Windows versions prior to 7.14 tvOS versions prior to 13 iTunes for Windows versions prior to 12.10.1...

PT-2019-18021

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 Safari versions prior to 12.1 Description A logic issue was addressed with improved validation. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting...

PT-2019-19112

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.3 Description A logic issue was addressed with improved restrictions, allowing a person with physical access to an iOS device to potentially see the email address used for iTunes. Recommendations For iOS versions prior...

CVE-2019-8625: Improper Neutralization of Input During Web Page Generation

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2019-8674: Improper Neutralization of Input During Web Page Generation

A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting...

PT-2019-19070

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4 Description A logic issue was addressed with improved state management, which allowed an encrypted volume to be unmounted and remounted by a different user without prompting for the password. Recommendations For...

CVE-2019-11105: Undefined Security Weakness

Logic issue in subsystem for IntelR CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access...

CVE-2019-8779: Exposure of Resource to Wrong Sphere

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions...

CVE-2019-8699: Undefined Security Weakness

A logic issue existed in the handling of answering phone calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4. The initiator of a phone call may be able to cause the recipient to answer a simultaneous Walkie-Talkie connection...

CVE-2019-8599: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access to an iOS device may be able to see the email address used for iTunes...

PT-2019-19163

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13 Description A logic issue existed with the display of notification previews, which may show on Bluetooth accessories even when previews are disabled. This issue was addressed with improved validation. Recommendations F...