10621 matches found
CVE-2019-8669
CVE-2019-8669 is a memory corruption issue addressed by苹果 in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes/iCloud updates, and in WebKitGTK/WebKitGTK4 via upstream fixes (2.28.x). The connected advisory (ALAS2-2020-1563) aggregates these fixes for WebKit-based components and no...
CVE-2019-8658
CVE-2019-8658 is a logic issue in WebKit/Apple WebKit that could lead to universal cross-site scripting when processing malicious web content. The patch set fixes the issue in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13...
CVE-2019-8658
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal...
CVE-2019-8658
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal...
CVE-2019-8669
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...
CVE-2019-8669
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...
CVE-2019-8637
CVE-2019-8637 is an Apple iOS/watchOS/tvOS vulnerability: an input validation issue could allow a malicious app to gain root privileges. Affected: Apple platforms with this CVE entry are fixed in iOS 12.3, tvOS 12.3, and watchOS 5.2.1; the vulnerability is addressed by improved input validation. ...
CVE-2019-8665
CVE-2019-8665 affects Apple iOS Messages and is listed as a denial-of-service issue resolved by the iOS 12.4 and watchOS 5.3 patches. The Connected Apple security content documents (HT210346 for watchOS 5.3 and HT210353 for iOS 12.4) describe an input/validation-related issue in Messages that cou...
CVE-2019-8637
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges...
CVE-2019-8646
CVE-2019-8646 is an out-of-bounds read vulnerability fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, and watchOS 5.3. Apple security pages state a remote attacker could leak memory via this issue in affected Core Data paths, with CVE-2019-8646 specifically tied to memory leakage (watchOS 5.3 ...
CVE-2019-8672
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...
CVE-2019-8658
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal...
CVE-2019-8669
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...
CVE-2019-8657
CVE-2019-8657 affects Apple operating systems (iOS 12.4; macOS Mojave 10.14.6; tvOS 12.4; watchOS 5.3). The issue is an out-of-bounds read resolved by improved input validation, triggered while parsing a maliciously crafted office document; implications include unexpected termination or arbitrary...
CVE-2019-8648
CVE-2019-8648 is a memory corruption issue that was addressed with improved input validation. The vulnerability is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, and watchOS 5.3. A remote attacker may be able to cause arbitrary code execution. The initial description does not specify the vul...
CVE-2019-8568
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system...
CVE-2019-8574
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to execute arbitrary code with system privileges...
CVE-2019-8577
An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges...
CVE-2019-8585
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. Processing a maliciously crafted movie file may lead to arbitrary code execution...