67 matches found
CVE-2019-8718
CVE-2019-8718 is an IOUSBDeviceFamily memory corruption vulnerability in Apple devices. The issue could allow an attacker to execute arbitrary code with kernel privileges via a local exploit, as described in Apple advisories. Affected components include IOUSBDeviceFamily on iOS/watchOS/tvOS; root...
CVE-2019-8718
A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...
CVE-2019-8734
CVE-2019-8734 involves memory corruption issues that Apple and related platforms addressed by memory management fixes. Publicly documented fixes include iOS 13, iCloud for Windows 7.14 and 10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows. The description notes that processing m...
CVE-2019-8706
CVE-2019-8706 is a memory corruption issue in Apple’s audio stack (CoreAudio) that is triggered by processing a maliciously crafted audio file. Root cause: memory corruption in the audio processing path. Affected: macOS/macOS Catalina, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6; fixes implement...
CVE-2019-8709
CVE-2019-8709 is a memory-corruption issue in Apple platforms that may allow an application to execute arbitrary code with kernel privileges. Concrete details from connected documents indicate this affects macOS (kernel), and that patches are provided in macOS Catalina 10.15, macOS Catalina 10.15...
About the security content of watchOS 6 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of watchOS 6
About the security content of watchOS 6 This document describes the security content of watchOS 6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...