CVE-2019-8550

An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A user’s video may not be paused in a FaceTime call if they exit the FaceTime app while the call is ringing...

CVE-2019-8553

CVE-2019-8553 is a GeoServices memory corruption vulnerability in Apple iOS and tvOS, triggered by clicking a malicious SMS link. The issue is addressed by Apple in iOS 12.2 and tvOS 12.2 (watchOS 5.2). The root cause is described as a memory corruption risk that is mitigated by improved validati...

CVE-2019-8549

CVE-2019-8549 concerns multiple input validation issues in MIG-generated code that could allow arbitrary code execution with system privileges. Public records indicate the flaw affects Apple platforms and was fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The NVD entry lists...

CVE-2019-8558

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8553

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution...

CVE-2019-8548

CVE-2019-8548 concerns Apple watchOS Passcode handling. A partially entered passcode may not clear when the device goes to sleep; Apple addressed this by clearing the passcode on a locked device sleep, and the issue is fixed in watchOS 5.2. Affected component: Passcode (Apple Watch). Root cause: ...

CVE-2019-8527

CVE-2019-8527 involves a buffer overflow that Apple addressed by improving size validation. Affected platforms include iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. Root cause: insufficient size validation leading to memory corruption. Impact per description: a remote attacker could...

CVE-2019-8552

CVE-2019-8552 is an Apple memory-init issue that is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The vulnerability could allow a malicious application to elevate privileges due to improved memory handling. Affected products are iOS, macOS Mojave, tvOS, and watchOS as liste...

CVE-2019-8558

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8527

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2019-8536

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8544

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8542

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious application may be able to elevate privileges...

CVE-2019-8548

An issue existed where partially entered passcodes may not clear when the device went to sleep. This issue was addressed by clearing the passcode when a locked device sleeps. This issue is fixed in watchOS 5.2. A partially entered passcode may not clear when the device goes to sleep...

CVE-2019-8559

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8550

CVE-2019-8550 concerns the FaceTime pausing behavior. According to the provided sources, an issue caused a user’s FaceTime video to fail to pause if they exited the FaceTime app while the call was ringing. The vulnerability is fixed by updated logic in the affected platforms: iOS 12.2, macOS Moja...

CVE-2019-8546

CVE-2019-8546 affects Apple platforms. A local access issue allowed viewing sensitive user information due to insufficient sandbox restrictions. It is fixed in iOS 12.2, macOS Mojave 10.14.4, and watchOS 5.2 (per Apple security updates HT209599/HT209600). Affected components include core sandbox ...

CVE-2019-8546

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A local user may be able to view sensitive user information...

CVE-2019-8552

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to elevate privileges...

CVE-2019-8541

Summary: CVE-2019-8541 is a privacy issue in motion sensor calibration that could allow a malicious app to track users between installs. It affects Apple devices and was fixed in iOS 12.2 and watchOS 5.2 via improved motion sensor processing. Huawei’s advisory (HWPSIRT-2019-05147) confirms this C...