CVE-2019-8598

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to read restricted memory...

CVE-2019-8602

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to elevate privileges...

CVE-2019-8613

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution...

CVE-2019-8620

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address...

CVE-2019-8560

CVE-2019-8560 affects Apple Disk Images: an out-of-bounds read could allow a malicious app to read restricted memory. Affected platforms include iOS 12.3+, macOS Mojave 10.14.5+, tvOS 12.3, and watchOS 5.2.1. Fixes are implemented via improved bounds checking and memory handling in the listed upd...

CVE-2019-8593

CVE-2019-8593 is a memory corruption vulnerability in AppleFileConduit affecting iOS/tvOS/watchOS prior to the listed patched versions. It could allow an application to execute arbitrary code with system privileges. Apple fixed it in iOS 12.3, tvOS 12.3, and watchOS 5.2.1; exploitation is describ...

CVE-2019-8602

CVE-2019-8602 describes a memory corruption issue in Apple software that was mitigated by removing the vulnerable code. It is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12. A malicious application may be able to elevate p...

CVE-2019-8613

CVE-2019-8613 is a use-after-free in the iOS Mail Message Framework (IMAP/NAMESPACE handling) that can lead to arbitrary code execution. It was fixed in iOS 12.3, tvOS 12.3, and watchOS 5.2.1. The vulnerability arises during deserialization/processing of IMAP namespace data, creating memory corru...

CVE-2019-8620

CVE-2019-8620 describes a user privacy issue in Apple’s Wi‑Fi component where a device may be passively tracked by its Wi‑Fi MAC address. The underlying fix was to remove the broadcast MAC address, mitigating tracking risk. Public documentation indicates the vulnerability affects iOS, tvOS, and w...

CVE-2019-8605

CVE-2019-8605 is a use-after-free vulnerability in Apple’s XNU kernel (iOS, macOS, tvOS, watchOS) that could allow a malicious app to execute arbitrary code with system privileges. The initial description notes a use-after-free that was fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, and watc...

CVE-2019-8598

CVE-2019-8598 is an input-validation issue identified in Apple platforms. The supplied documents show the vulnerability affecting Apple iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12, with the impact described as a malicious applic...

CVE-2019-8607

CVE-2019-8607 describes an out-of-bounds read in WebKit that could disclose process memory when processing malicious web content. Affected products include Apple platforms (iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes/Windows, iCloud for Windows 7.12). The root ...

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...

CVE-2019-8600

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution...

CVE-2019-8593

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8601

CVE-2019-8601 refers to multiple memory corruption issues addressed in Apple’s WebKit-related components. The description indicates that malformed web content could be exploited to achieve arbitrary code execution, due to memory handling problems that were fixed. Affected platforms/derivatives (f...

CVE-2019-8601

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8527

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...