CVE-2019-6213

CVE-2019-6213 is a kernel memory corruption vulnerability that could allow an attacker to execute arbitrary code with kernel privileges. Apple’s advisories (HT209447 for tvOS/iOS 12.1.2/12.1.3, HT209443 for iOS 12.1.3, and related Apple security notes) describe a memory corruption issue resolved ...

CVE-2019-6202

CVE-2019-6202 affects Apple platforms (iOS, macOS, watchOS). It is an out-of-bounds read issue resolved by updates: iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. The issue allowed a malicious application to elevate privileges; root cause described as out-of-bounds read corrected with improved ...

CVE-2019-6217

CVE-2019-6217 is a WebKit/WebKit-related memory corruption issue addressed across Apple platforms. Affected components include WebKit (and related Apple WebKit-based apps) where memory handling flaws allowed processing malicious web content to lead to arbitrary code execution. The published fixes...

CVE-2019-6210

CVE-2019-6210 is a kernel memory corruption vulnerability affecting Apple TV devices (4th generation and Apple TV 4K). The tvOS 12.1.2 entry describes it as a memory corruption issue fixed by improved input validation, while the iOS 12.1.3 page notes a fix for the kernel issue via improved lock s...

CVE-2019-6224

CVE-2019-6224 is an Apple FaceTime vulnerability where a buffer overflow in the FaceTime component could let a remote attacker initiate a call and cause arbitrary code execution. The issue is documented as a memory handling/validation problem and is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS...

CVE-2019-6227

CVE-2019-6227 is a WebKit-related memory corruption vulnerability that could be triggered by processing malicious web content, potentially leading to arbitrary code execution. The vulnerability is documented in Apple advisories and is fixed in macOS/Safari/WebKit updates: iOS 12.1.3, tvOS 12.1.2,...

CVE-2019-6230

CVE-2019-6230 is a memory initialization issue in CoreAnimation that could allow a sandboxed application to break out of its sandbox. Apple documents indicate the flaw is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3, with affected entries appearing under Apple CoreAni...

CVE-2019-6231

CVE-2019-6231 refers to an out-of-bounds read in CoreAnimation that could allow a malicious app to read restricted memory. The issue was addressed with improved bounds checking and is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3. Connected Apple advisories HT209447 (t...

CVE-2019-6216

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6216

CVE-2019-6216 concerns multiple memory corruption issues in WebKit-related components. The description indicates the vulnerability is addressed by memory handling improvements and is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, and iCloud for Windows ...

CVE-2019-6219

CVE-2019-6219 is a denial-of-service vulnerability affecting Apple’s platforms via a malformed message processed by the Natural Language Processing component. The issue arose from insufficient input/validation handling and was addressed by improved validation. According to Apple advisories, the f...

CVE-2019-6210

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2019-6226

CVE-2019-6226 is a set of memory corruption issues in WebKit that could allow arbitrary code execution when processing maliciously crafted web content. The vulnerability is addressed across multiple Apple platforms and components, with fixes in: iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0...

CVE-2019-6216

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6217

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6227

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6226

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6227

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6227

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6216

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...