CVE-2019-8837

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. A malicious application may be able to access restricted files...

CVE-2019-8834

A configuration issue was addressed with additional restrictions. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, iOS 13.3 and iPadOS 13.3, iTunes 12.10.3 for Windows, iClo...

CVE-2019-8834

The CVE-2019-8834 entry affects Apple’s CFNetwork (and related iCloud/WebKit contexts in Apple OS releases). Description: a configuration issue may allow an attacker in a privileged network position to bypass HSTS for a limited set of top‑level domains not previously in the HSTS preload list. Aff...

CVE-2019-8828

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code...

CVE-2019-8777

CVE-2019-8777 is an Apple macOS lock-screen information disclosure vulnerability. The affected components concern the lock screen handling that could allow a local attacker to view contacts from a locked device. The Apple advisories indicate the issue was addressed by improved state management an...

CVE-2019-8645

CVE-2019-8645 relates to macOS Mail handling of S/MIME-encrypted messages. The issue stems from insufficient isolation of MIME in Mail, enabling an attacker in a privileged network position to intercept S/MIME email contents. Apple fixes identify macOS Mojave 10.14.4 and Security Update 2019-002 ...

CVE-2019-8696

CVE-2019-8696 is a buffer overflow in CUPS libcups, specifically in asn1_get_type and asn1_get_packed, that could allow arbitrary code execution when an attacker is in a privileged network position. The issue is fixed in macOS Mojave 10.14.6 and Security Update 2019-004 for High Sierra and Sierra...

CVE-2019-8696

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

CVE-2019-8696

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

CVE-2019-8696

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

CVE-2019-8675

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

CVE-2019-8675

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

CVE-2019-8675

CVE-2019-8675 is a stack-buffer-overflow in libcups (asn1_get_type and asn1_get_packed) used by CUPS. In macOS Sierra 10.12.6, High Sierra, and Mojave 10.14.x, an attacker on a privileged network position could potentially execute arbitrary code. Apple patches this as part of macOS Mojave 10.14.6...

CVE-2019-8633

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, tvOS 12.3, watchOS 5.3. An application may be able to read restricted memory...

CVE-2019-8612

A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, tvOS 12.3, watchOS 5.2.1, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iO...

CVE-2019-8656

CVE-2019-8656 describes a Gatekeeper bypass in macOS where extracting a zip file containing a symbolic link to an endpoint on an NFS mount attacker-controlled could bypass the restriction. The issue was mitigated by Apple through checks that block execution of applications from remote shared loca...

CVE-2019-8640

CVE-2019-8640 is a logic issue in macOS components that could allow a sandboxed process to bypass sandbox restrictions. The vulnerability is addressed by patches in macOS Mojave 10.14.5 and Security Update 2019-003 for High Sierra and Sierra. The available sources indicate a fix via improved inpu...

CVE-2019-8640

A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2019-8631

A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, tvOS 12.3. Users removed from an iMessage conversation may still be able to alter state...

CVE-2019-8547

CVE-2019-8547 is an out-of-bounds read vulnerability that could disclose kernel memory due to improper input validation. The issue affects Apple platforms and was addressed via multiple updates: macOS Mojave 10.14.5, Security Update 2019-003 for High Sierra and Sierra, watchOS 5.2, macOS Mojave 1...