CVE-2018-4433

CVE-2018-4433 describes a configuration issue that could allow a malicious application to modify protected parts of the file system. The entry is fixed by Apple in macOS Mojave 10.14.4 and Security Update 2019-002 for High Sierra and Sierra, as well as in watchOS 5, iOS 12, and tvOS 12. Public re...

CVE-2018-4296

CVE-2018-4296 is supported by connected documents, confirming a permissions issue in Apple DiskArbitration that could affect macOS Mojave. The entry states that the issue was fixed in macOS Mojave 10.14 via additional ownership checks in DiskArbitration. Other sources reiterate the same remediati...

PT-2020-11201 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.4 Security Update versions prior to 2019-002 High Sierra Security Update versions prior to 2019-002 Sierra Description: A validation issue existed in the handling of symlinks, which was addressed with improved...

About the security content of macOS 10.14.6 Supplemental Update - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Apple Security Update: macOS 10.14.6 Supplemental Update

Apple recommends to install security update macOS 10.14.6 Supplemental Update on devices macOS Mojave...

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...

cups: stack-buffer-overflow in libcups's asn1_get_type function

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

cups: stack-buffer-overflow in libcups's asn1_get_packed function

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

PT-2020-20883 · Apple · Macos Catalina +3

Name of the Vulnerable Software and Affected Versions: macOS Catalina versions prior to 10.15.7 Security Update 2020-005 High Sierra versions prior to the update Security Update 2020-005 Mojave versions prior to the update Description: This issue was addressed with improved checks. A remote...

PT-2020-20898 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.15.7 Security Update versions prior to 2020-005 for High Sierra and Mojave Description: An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted image may lead to...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Apple...

Apple Security Update: macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave

Apple recommends to install security update macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave on devices macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15...

About the security content of macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Apple Security Update: Xcode 12.0

Apple recommends to install security update Xcode 12.0 on devices macOS Mojave 10.15.4 and later...

CVE-2019-8619

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8596

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8594

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...

CVE-2019-8687

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...

CVE-2019-8690

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously...