CVE-2019-8728

CVE-2019-8728 involves multiple memory corruption issues fixed by Apple in iOS 13, iCloud for Windows 7.14/10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows. The CVE affects processing maliciously crafted web content, which may lead to arbitrary code execution. The underlying ca...

CVE-2019-8746

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows...

CVE-2019-8746

CVE-2019-8746 is an out-of-bounds read vulnerability that Apple documents as addressed by improved input validation. The CVE affects multiple Apple platforms in the 2019 timeframe, with specific fixes noted for macOS Catalina 10.15 and 10.15.1, iOS 13, tvOS 13, watchOS 6, iCloud for Windows 7.14/...

CVE-2019-8740

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8740

CVE-2019-8740 is a memory corruption vulnerability in Apple’s kernel components. The vulnerability allows an application to potentially execute arbitrary code with kernel privileges. Apple fixes this in iOS 13.1/iPadOS 13.1, watchOS 6, and tvOS 13 by improving locking in the related kernel code. ...

CVE-2019-8712

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8712

CVE-2019-8712 is a memory corruption vulnerability reported in Apple OS kernels that could allow an app to execute arbitrary code with system privileges. The description notes a fix through improved memory handling, with patches in watchOS 6, iOS 13, and tvOS 13. Connected documents corroborate k...

CVE-2019-8718

CVE-2019-8718 is an IOUSBDeviceFamily memory corruption vulnerability in Apple devices. The issue could allow an attacker to execute arbitrary code with kernel privileges via a local exploit, as described in Apple advisories. Affected components include IOUSBDeviceFamily on iOS/watchOS/tvOS; root...

CVE-2019-8718

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8734

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code executi...

CVE-2019-8734

CVE-2019-8734 involves memory corruption issues that Apple and related platforms addressed by memory management fixes. Publicly documented fixes include iOS 13, iCloud for Windows 7.14 and 10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows. The description notes that processing m...

CVE-2019-8706

CVE-2019-8706 is a memory corruption issue in Apple’s audio stack (CoreAudio) that is triggered by processing a maliciously crafted audio file. Root cause: memory corruption in the audio processing path. Affected: macOS/macOS Catalina, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6; fixes implement...

CVE-2019-8668

A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. Processing a maliciously crafted image may lead to a denial of service...

CVE-2019-8668

CVE-2019-8668 affects Apple’s image processing path and can cause a denial-of-service when processing a maliciously crafted image. The issue is fixed in iOS 12.4, tvOS 12.4, and watchOS 5.3. Affected products involve iPhone/iPad/iPod touch platforms running iOS and corresponding Apple TV and Appl...

CVE-2019-8709

CVE-2019-8709 is a memory-corruption issue in Apple platforms that may allow an application to execute arbitrary code with kernel privileges. Concrete details from connected documents indicate this affects macOS (kernel), and that patches are provided in macOS Catalina 10.15, macOS Catalina 10.15...

CVE-2019-8638

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 5.2, iCloud for Windows 7.11, iOS 12.2, iTunes 12.9.4 for Windows, Safari 12.1. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8638

CVE-2019-8638 is a memory corruption issue in WebKit-related components triggered by processing malicious web content, leading to arbitrary code execution. The CVE affects multiple Apple platforms and products, with fixes shipped in: iOS 12.2, watchOS 5.2, Safari 12.1, iCloud for Windows 7.11, an...

CVE-2019-8633

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, tvOS 12.3, watchOS 5.3. An application may be able to read restricted memory...

CVE-2019-8612

A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, tvOS 12.3, watchOS 5.2.1, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iO...

CVE-2019-8612

CVE-2019-8612 is a logic issue in the Wi‑Fi/driver state handling in Apple’s ecosystem. The vulnerability allows an attacker with privileged network access to modify driver state, potentially affecting devices across macOS (Sierra/High Sierra/Mojave and newer macOS updates) and related Apple plat...