Macos Security Vulnerabilities and Issues — Page 2 of Macos CVE List

Lucene search

AppleMacos

208 matches found

CVE•added 2019/12/18 6:15 p.m.•165 views

CVE-2019-8670

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6, Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing.

4.3CVSS4.9AI score0.00378EPSS

CVE•added 2019/12/18 6:15 p.m.•146 views

CVE-2019-8641

An out-of-bounds read was addressed with improved input validation.

9.8CVSS8.7AI score0.23741EPSS

CVE•added 2019/01/11 6:29 p.m.•140 views

CVE-2018-4404

In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling.

9.3CVSS6.6AI score0.70102EPSS

CVE•added 2019/12/18 6:15 p.m.•124 views

CVE-2019-8662

This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

9.8CVSS7.2AI score0.14427EPSS

CVE•added 2019/03/05 4:29 p.m.•123 views

CVE-2019-6225

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges.

7.8CVSS6.7AI score0.82754EPSS

CVE•added 2019/12/18 6:15 p.m.•122 views

CVE-2019-8565

A race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to gain root privileges.

7.6CVSS6.6AI score0.28731EPSS

CVE•added 2019/12/18 6:15 p.m.•112 views

CVE-2019-8717

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.

7.8CVSS8.2AI score0.00727EPSS

CVE•added 2019/12/18 6:15 p.m.•109 views

CVE-2019-8663

This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6. A remote attacker may be able to leak memory.

5.3CVSS5.6AI score0.06309EPSS

CVE•added 2019/12/18 6:15 p.m.•105 views

CVE-2019-8802

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious application may be able to gain root privileges.

9.3CVSS6.8AI score0.00288EPSS

CVE•added 2019/03/05 4:29 p.m.•104 views

CVE-2019-6213

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.3AI score0.06188EPSS

CVE•added 2019/12/18 6:15 p.m.•104 views

CVE-2019-8591

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.

8.8CVSS6.1AI score0.07151EPSS

CVE•added 2019/12/18 6:15 p.m.•101 views

CVE-2019-8514

A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges.

7.8CVSS7.2AI score0.05033EPSS

CVE•added 2019/12/18 6:15 p.m.•101 views

CVE-2019-8660

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

9.8CVSS8.5AI score0.04676EPSS

CVE•added 2019/03/05 4:29 p.m.•99 views

CVE-2019-6224

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.

8.8CVSS7.9AI score0.35793EPSS

CVE•added 2019/12/18 6:15 p.m.•97 views

CVE-2019-8552

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to elevate privileges.

7.8CVSS6.9AI score0.00352EPSS

CVE•added 2019/12/18 6:15 p.m.•97 views

CVE-2019-8685

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may l...

9.3CVSS8.4AI score0.00974EPSS

CVE•added 2019/12/18 6:15 p.m.•96 views

CVE-2019-8661

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.

9.8CVSS8.4AI score0.08047EPSS

CVE•added 2019/03/05 4:29 p.m.•95 views

CVE-2019-6214

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox.

8.6CVSS6.7AI score0.08868EPSS

CVE•added 2019/03/05 4:29 p.m.•94 views

CVE-2019-6205

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.

7.8CVSS6.8AI score0.09194EPSS

CVE•added 2019/03/05 4:29 p.m.•94 views

CVE-2019-6208

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.

5.5CVSS5.3AI score0.06471EPSS

CVE•added 2019/03/05 4:29 p.m.•92 views

CVE-2019-6209

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.

5.5CVSS4.9AI score0.06285EPSS

CVE•added 2019/03/05 4:29 p.m.•92 views

CVE-2019-6218

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.4AI score0.08407EPSS

CVE•added 2019/12/18 6:15 p.m.•92 views

CVE-2019-8600

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.

9.8CVSS8.5AI score0.03382EPSS

CVE•added 2019/12/18 6:15 p.m.•91 views

CVE-2019-8786

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.7AI score0.00477EPSS

CVE•added 2019/04/03 6:29 p.m.•89 views

CVE-2018-4291

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

10CVSS7AI score0.00717EPSS

CVE•added 2019/12/18 6:15 p.m.•89 views

CVE-2019-8602

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to elevate privileges.

7.8CVSS7.7AI score0.0077EPSS

CVE•added 2019/12/18 6:15 p.m.•88 views

CVE-2019-8513

This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands.

7.8CVSS7.5AI score0.11275EPSS

CVE•added 2019/12/18 6:15 p.m.•88 views

CVE-2019-8628

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8CVSS8.8AI score0.00588EPSS

CVE•added 2019/12/18 6:15 p.m.•88 views

CVE-2019-8784

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. An application may be able to execute arbitrary code with system privileges.

9.3CVSS7.9AI score0.00499EPSS

CVE•added 2019/12/18 6:15 p.m.•87 views

CVE-2019-8745

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing a maliciously crafted text file may lead to arbitrary code execution.

8.8CVSS8.3AI score0.0109EPSS

CVE•added 2019/04/03 6:29 p.m.•86 views

CVE-2018-4417

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS5.7AI score0.00197EPSS

CVE•added 2019/12/18 6:15 p.m.•86 views

CVE-2019-8542

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious application may be able to elevate privileges.

7.8CVSS7.3AI score0.0048EPSS

CVE•added 2019/12/18 6:15 p.m.•85 views

CVE-2019-8787

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A remote attacker may be able to leak memory.

7.5CVSS6.7AI score0.00689EPSS

CVE•added 2019/12/18 6:15 p.m.•84 views

CVE-2019-8560

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to read restricted memory.

5.5CVSS5.3AI score0.00269EPSS

CVE•added 2019/12/18 6:15 p.m.•84 views

CVE-2019-8577

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges.

7.8CVSS7.5AI score0.00244EPSS

CVE•added 2019/04/03 6:29 p.m.•83 views

CVE-2018-4463

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.

9.3CVSS7.2AI score0.00171EPSS

CVE•added 2019/03/05 4:29 p.m.•83 views

CVE-2019-6221

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges.

7.8CVSS7.1AI score0.00259EPSS

CVE•added 2019/12/18 6:15 p.m.•82 views

CVE-2019-6207

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.

5.5CVSS5.4AI score0.00656EPSS

CVE•added 2019/12/18 6:15 p.m.•82 views

CVE-2019-8521

This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to overwrite arbitrary files.

5.8CVSS5.7AI score0.00356EPSS

CVE•added 2019/12/18 6:15 p.m.•81 views

CVE-2019-8530

This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. A malicious application may be able to overwrite arbitrary files.

5.8CVSS5.7AI score0.0042EPSS

CVE•added 2019/04/03 6:29 p.m.•79 views

CVE-2018-4286

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

10CVSS7AI score0.00717EPSS

CVE•added 2019/12/18 6:15 p.m.•79 views

CVE-2019-8529

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. An application may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.8AI score0.00144EPSS

CVE•added 2019/12/18 6:15 p.m.•79 views

CVE-2019-8576

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to cause unexpected system termination or read kernel memory.

7.1CVSS6.4AI score0.00052EPSS

CVE•added 2019/04/03 6:29 p.m.•78 views

CVE-2018-4346

A validation issue existed which allowed local file access. This was addressed with input sanitization. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS6.2AI score0.00197EPSS

CVE•added 2019/03/05 4:29 p.m.•78 views

CVE-2019-6210

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.3AI score0.00456EPSS

CVE•added 2019/04/03 6:29 p.m.•77 views

CVE-2018-4418

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS6.3AI score0.00197EPSS

CVE•added 2019/12/18 6:15 p.m.•77 views

CVE-2019-8550

An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A user’s video may not be paused in a FaceTime call if they exit the FaceTime app while the call is ringing.

4.3CVSS5.2AI score0.00459EPSS

CVE•added 2019/12/18 6:15 p.m.•77 views

CVE-2019-8785

9.3CVSS7.8AI score0.00456EPSS

CVE•added 2019/12/18 6:15 p.m.•77 views

CVE-2019-8797

9.3CVSS7.8AI score0.00456EPSS

CVE•added 2019/12/18 6:15 p.m.•77 views

CVE-2019-8798

5.5CVSS6.5AI score0.00173EPSS

Total number of security vulnerabilities208