Mac Os X Security Vulnerabilities and Issues — Page 6 of Mac Os X CVE List

Lucene search

AppleMac Os X

310 matches found

cve•added 2019/04/03 6:29 p.m.•63 views

CVE-2018-4403

This issue was addressed by removing additional entitlements. This issue affected versions prior to macOS Mojave 10.14.1.

5.5CVSS6.3AI score0.00226EPSS

cve•added 2019/12/18 6:15 p.m.•63 views

CVE-2019-8522

A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4. An encrypted volume may be unmounted and remounted by a different user without prompting for the password.

5.5CVSS5.9AI score0.00107EPSS

cve•added 2019/12/18 6:15 p.m.•63 views

CVE-2019-8555

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbitrary code with kernel privileges.

9.3CVSS8AI score0.00465EPSS

cve•added 2019/12/18 6:15 p.m.•63 views

CVE-2019-8590

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.3AI score0.00404EPSS

cve•added 2019/12/18 6:15 p.m.•63 views

CVE-2019-8603

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5. An application may be able to read restricted memory.

8.8CVSS6.4AI score0.00441EPSS

cve•added 2019/12/18 6:15 p.m.•63 views

CVE-2019-8701

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.9AI score0.00131EPSS

cve•added 2019/04/03 6:29 p.m.•62 views

CVE-2018-4421

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

9.3CVSS6.9AI score0.00251EPSS

cve•added 2019/03/05 4:29 p.m.•62 views

CVE-2019-6200

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code.

8.8CVSS7.1AI score0.00165EPSS

cve•added 2019/12/18 6:15 p.m.•62 views

CVE-2019-8533

A lock handling issue was addressed with improved lock handling. This issue is fixed in macOS Mojave 10.14.4. A Mac may not lock when disconnecting from an external monitor.

7.8CVSS7.2AI score0.00118EPSS

cve•added 2019/12/18 6:15 p.m.•62 views

CVE-2019-8616

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.6AI score0.00119EPSS

cve•added 2019/04/03 6:29 p.m.•61 views

CVE-2018-4333

A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12, macOS Mojave 10.14.

5.5CVSS6AI score0.00197EPSS

cve•added 2019/12/18 6:15 p.m.•61 views

CVE-2019-8634

An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account.

8.8CVSS7.3AI score0.00414EPSS

cve•added 2019/12/18 6:15 p.m.•61 views

CVE-2019-8691

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.

5.5CVSS4.9AI score0.0006EPSS

cve•added 2019/12/18 6:15 p.m.•61 views

CVE-2019-8805

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arbitrary code with system privileges.

9.3CVSS7.8AI score0.12917EPSS

cve•added 2019/04/03 6:29 p.m.•60 views

CVE-2018-4178

A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4.

5.5CVSS5AI score0.00039EPSS

cve•added 2019/12/18 6:15 p.m.•60 views

CVE-2019-8629

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

9.3CVSS7.4AI score0.00297EPSS

cve•added 2019/12/18 6:15 p.m.•60 views

CVE-2019-8730

The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed in macOS Catalina 10.15. A local user may be able to view a user’s locked notes.

3.3CVSS4.7AI score0.00115EPSS

cve•added 2019/04/03 6:29 p.m.•59 views

CVE-2018-4285

A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

9.3CVSS6AI score0.00151EPSS

cve•added 2019/01/11 6:29 p.m.•59 views

CVE-2018-4298

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation.

10CVSS8.8AI score0.00334EPSS

cve•added 2019/12/18 6:15 p.m.•59 views

CVE-2019-8507

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.4. Processing malicious data may lead to unexpected application termination.

5.5CVSS6.6AI score0.00059EPSS

cve•added 2019/12/18 6:15 p.m.•59 views

CVE-2019-8604

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

8.8CVSS7.9AI score0.0021EPSS

cve•added 2019/12/18 6:15 p.m.•59 views

CVE-2019-8694

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS8.2AI score0.00297EPSS

cve•added 2019/04/03 6:29 p.m.•58 views

CVE-2018-4353

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.

9.8CVSS8.4AI score0.00504EPSS

cve•added 2019/04/03 6:29 p.m.•58 views

CVE-2018-4449

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.

9.3CVSS7.2AI score0.00434EPSS

cve•added 2019/03/05 4:29 p.m.•58 views

CVE-2019-6220

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory.

5.5CVSS5.3AI score0.00197EPSS

cve•added 2019/04/03 6:29 p.m.•57 views

CVE-2018-4283

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6.

5.5CVSS4.8AI score0.0006EPSS

cve•added 2019/04/03 6:29 p.m.•57 views

CVE-2018-4435

A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

7.8CVSS6.8AI score0.02792EPSS

cve•added 2019/04/03 6:29 p.m.•57 views

CVE-2018-4465

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

9.3CVSS7.2AI score0.00149EPSS

cve•added 2019/12/18 6:15 p.m.•57 views

CVE-2019-8589

This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.5. A malicious application may bypass Gatekeeper checks.

5.5CVSS5.7AI score0.00194EPSS

cve•added 2019/04/03 6:29 p.m.•56 views

CVE-2018-4268

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

10CVSS6.7AI score0.00442EPSS

cve•added 2019/12/18 6:15 p.m.•56 views

CVE-2019-8693

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.

5.5CVSS5.9AI score0.00226EPSS

cve•added 2019/12/18 6:15 p.m.•56 views

CVE-2019-8697

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.6AI score0.00122EPSS

cve•added 2019/12/18 6:15 p.m.•56 views

CVE-2019-8755

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to determine kernel memory layout.

7.8CVSS6.5AI score0.00136EPSS

cve•added 2019/04/03 6:29 p.m.•55 views

CVE-2018-4460

A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

6.5CVSS6.1AI score0.00702EPSS

cve•added 2019/04/03 6:29 p.m.•55 views

CVE-2018-4470

A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6.

4.3CVSS4.4AI score0.0019EPSS

cve•added 2019/12/18 6:15 p.m.•55 views

CVE-2019-8692

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.

5.5CVSS4.6AI score0.0006EPSS

cve•added 2019/12/18 6:15 p.m.•55 views

CVE-2019-8758

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.6AI score0.00131EPSS

cve•added 2019/12/18 6:15 p.m.•55 views

CVE-2019-8770

The issue was addressed with improved permissions logic. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access recent documents.

5.5CVSS5.5AI score0.00227EPSS

cve•added 2019/12/18 6:15 p.m.•55 views

CVE-2019-8807

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arbitrary code with system privileges.

9.3CVSS8.1AI score0.00317EPSS

cve•added 2019/12/18 6:15 p.m.•54 views

CVE-2019-8667

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect.

5.3CVSS5.8AI score0.0013EPSS

cve•added 2019/12/18 6:15 p.m.•54 views

CVE-2019-8695

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with system privileges.

9.3CVSS7.9AI score0.00297EPSS

cve•added 2019/04/03 6:29 p.m.•53 views

CVE-2018-4303

An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14, iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

7.8CVSS6.8AI score0.00259EPSS

cve•added 2019/04/03 6:29 p.m.•53 views

CVE-2018-4447

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

9.3CVSS7.2AI score0.00185EPSS

cve•added 2019/12/18 6:15 p.m.•53 views

CVE-2019-8757

A race condition existed when reading and writing user preferences. This was addressed with improved state handling. This issue is fixed in macOS Catalina 10.15. The "Share Mac Analytics" setting may not be disabled when a user deselects the switch to share analytics.

2.5CVSS4.2AI score0.00104EPSS

cve•added 2019/04/03 6:29 p.m.•52 views

CVE-2018-4276

A null pointer dereference was addressed with improved validation. This issue affected versions prior to macOS High Sierra 10.13.6.

7.5CVSS5.5AI score0.0039EPSS

cve•added 2019/04/03 6:29 p.m.•52 views

CVE-2018-4431

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

5.5CVSS5.5AI score0.0209EPSS

cve•added 2019/01/11 6:29 p.m.•51 views

CVE-2017-13889

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the validation of credentials. This was addressed with improved credential validation.

9.8CVSS8.3AI score0.00408EPSS

cve•added 2019/01/11 6:29 p.m.•50 views

CVE-2018-4254

In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with improved input validation.

10CVSS7AI score0.00442EPSS

cve•added 2019/01/11 6:29 p.m.•50 views

CVE-2018-4257

In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.

10CVSS7.5AI score0.00477EPSS

cve•added 2019/01/11 6:29 p.m.•48 views

CVE-2018-4179

In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This issue was addressed with additional logic.