1840 matches found
CVE-2019-8579
CVE-2019-8579 involves an input validation issue with improved memory handling that could allow a local attacker to gain elevated privileges. The vulnerability is fixed in macOS Mojave 10.14.4 and in Security Update 2019-002 for High Sierra and Sierra; affected versions prior to these patches wer...
CVE-2019-8573
An input validation issue was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause a system denial of service...
CVE-2019-8573
CVE-2019-8573 is an input-validation vulnerability that Apple fixed across multiple updates. The advisory track shows the issue being addressed by macOS Mojave 10.14.5, High Sierra and Sierra Security Updates 2019-003, iOS 12.3, and watchOS 5.2.1, with a remote attacker potentially causing a deni...
CVE-2019-8538
CVE-2019-8538 affects multiple Apple platforms (watchOS 5.2; macOS Mojave 10.14.4; Security Update 2019-002 for High Sierra/Sierra; iOS 12.2). Root cause: processing a specially crafted vcf file may trigger a denial of service due to inadequate input validation. Apple credits updated validation t...
CVE-2019-8538
A denial of service issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. Processing a maliciously crafted vcf file may lead to a denial of service...
CVE-2019-8569
CVE-2019-8569 is a memory corruption issue in Touch Bar Support on macOS, enabling an attacker with local access to potentially execute arbitrary code with system privileges. The vulnerability is addressed in macOS Mojave 10.14.5 and Security Updates 2019-003 for High Sierra/Sierra, as well as ma...
CVE-2019-8564
CVE-2019-8564 describes a logic issue resolved by improved validation, fixed in macOS Mojave 10.14.4 and Security Update 2019-002 for High Sierra/Sierra. An attacker in a privileged network position could modify driver state. The initial description provides affected platforms and the remediation...
CVE-2019-8564
A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position can modify driver state...
CVE-2019-8539
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. A malicious application may be able to execute arbitrary code with system privileges...
CVE-2019-8539
CVE-2019-8539 is a memory initialization issue in Apple Disk Management that could allow a malicious application to execute arbitrary code with system privileges on macOS. Public details in connected sources indicate the vulnerability affects macOS Mojave (Disk Management component) and was addre...
CVE-2019-8525
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS...
CVE-2019-7288
The CVE-2019-7288 issue is a FaceTime Live Photos vulnerability reported in multiple sources. The Red Hat and CNVD entries, along with NVD/NISTA records, confirm that Apple fixed the flaw by updating FaceTime components in macOS Mojave 10.14.3 Supplemental Update and iOS 12.1.4. The available doc...
CVE-2019-7288
The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos...
CVE-2018-4467
CVE-2018-4467 is a memory corruption vulnerability in macOS components that enables a malicious local actor to elevate privileges. The issue is addressed via state-management improvements and is fixed in macOS Mojave 10.14.3 and Security Updates for macOS High Sierra (2019-001), Sierra (2019-001)...
CVE-2018-4448
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.1.1, watchOS 5.1.2, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update...
CVE-2018-4452
CVE-2018-4452 describes a memory consumption issue that could allow a malicious application to execute arbitrary code with system privileges on macOS components. Documented impact includes potential elevation of privileges. The issue is fixed in macOS updates: Mojave 10.14.3, Security Update 2019...
CVE-2018-4468
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra. A malicious application may be able to access restricted files...
CVE-2018-4468
CVE-2018-4468 is an Apple macOS vulnerability where the issue was resolved by removing additional entitlements. The affected entry states that a malicious application could access restricted files, and fixes are provided in macOS Mojave 10.14.1 and corresponding Security Updates (High Sierra 2018...
CVE-2018-4451
This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation...
CVE-2018-4451
CVE-2018-4451 is a memory corruption (Use-After-Free) vulnerability in Appleās IntelHD5000 graphics stack that affects macOS through the IGAccel kernel extensions. TALOS/POCs describe how a VLC-injected library and improper resource handling in IOAccelSharedUserClient2 can cause a use-after-free ...