CVE-2019-8511

CVE-2019-8511 is a buffer‑overflow issue addressed by Apple with improved memory handling. It affects Apple platforms (iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2) and may allow a malicious app to elevate privileges. Patches are in the referenced updates; exploitation details are not provided in ...

CVE-2019-8514

CVE-2019-8514 describes a logic issue in state management that could allow an application to gain elevated privileges. Affected platforms include Apple ecosystem components, with fixes delivered in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The description does not specify the ex...

CVE-2019-8517

CVE-2019-8517 is an out-of-bounds read in Apple’s TrueTypeScaler/font processing component. Affects iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. Exploitation could lead to disclosure of process memory. The vulnerability is addressed by the listed fixed OS versions; no exploit detai...

CVE-2019-8511

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A malicious application may be able to elevate privileges...

CVE-2019-8516

CVE-2019-8516 describes a validation issue in processing a malicious string that could lead to a denial of service. Affected Apple platforms include iOS, macOS Mojave, tvOS, and watchOS with fixes in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The underlying cause is a validation ...

CVE-2019-8518

CVE-2019-8518 is a WebKit memory corruption issue fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The vulnerability allows arbitrary code execution when processing malicious web content. Exploit discussion notes an out-of-bounds acce...

CVE-2019-8510

CVE-2019-8510 is an out-of-bounds read in the kernel that could disclose kernel memory. Apple states fixes in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2, addressing input-validation gaps that allowed memory disclosure. The NVD entry aligns with a local-attack vector (AV:L) with LO...

CVE-2019-8506

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-7292

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory...

CVE-2019-8516

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service...

CVE-2019-8506

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8518

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8502

CVE-2019-8502 affects Apple platforms (iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2) where an API handling dictation requests contained validation issues. The root cause is improper handling/validation in dictation initiation, allowing a malicious app to initiate a Dictation request wit...

CVE-2019-7292

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory...

CVE-2019-8506

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6207

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout...

CVE-2019-6207

CVE-2019-6207 is an out-of-bounds read in kernel memory handling that could let a malicious app determine kernel memory layout. Apple fixes: iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, via/improved input validation. Public documentation shows affected components (Kernel and related su...

PT-2019-19229

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.2 iPadOS versions prior to 13.2 macOS Catalina versions prior to 10.15.1 tvOS versions prior to 13.2 watchOS versions prior to 6.1 Description An authentication issue was addressed with improved state management,...

CVE-2019-8637: Improper Input Validation

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges...

PT-2019-19121

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.3 tvOS versions prior to 12.3 watchOS versions prior to 5.2.1 Description A user privacy issue allowed devices to be passively tracked by their WiFi MAC address. This issue has been addressed by removing the broadcast...