Macos Security Vulnerabilities and Issues — Page 3 of Macos CVE List

Lucene search

AppleMacos

208 matches found

CVE•added 2019/04/03 6:29 p.m.•76 views

CVE-2018-4287

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

10CVSS7AI score0.00717EPSS

CVE•added 2019/04/03 6:29 p.m.•76 views

CVE-2018-4393

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.

9.3CVSS7.5AI score0.00149EPSS

CVE•added 2019/12/18 6:15 p.m.•76 views

CVE-2019-8574

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to execute arbitrary code with system privileges.

9.3CVSS8AI score0.0036EPSS

CVE•added 2019/12/18 6:15 p.m.•76 views

CVE-2019-8585

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. Processing a maliciously crafted movie file may lead to arbitrary code execution.

8.8CVSS7.8AI score0.00679EPSS

CVE•added 2019/12/18 6:15 p.m.•76 views

CVE-2019-8803

An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials..

8.4CVSS6.8AI score0.00159EPSS

CVE•added 2019/04/03 6:29 p.m.•75 views

CVE-2018-4350

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.

9.3CVSS6.7AI score0.00144EPSS

CVE•added 2019/04/03 6:29 p.m.•75 views

CVE-2018-4406

A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.

6.5CVSS6.7AI score0.0037EPSS

CVE•added 2019/03/04 8:29 p.m.•75 views

CVE-2019-6235

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.

10CVSS7.5AI score0.00813EPSS

CVE•added 2019/12/18 6:15 p.m.•75 views

CVE-2019-7293

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to read kernel memory.

5.5CVSS5.5AI score0.00174EPSS

CVE•added 2019/12/18 6:15 p.m.•75 views

CVE-2019-8537

An access issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to view a user’s locked notes.

5.5CVSS5.6AI score0.00048EPSS

CVE•added 2019/12/18 6:15 p.m.•75 views

CVE-2019-8788

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Improper URL processing may lead to data exfiltration.

7.5CVSS6.7AI score0.0035EPSS

CVE•added 2019/04/03 6:29 p.m.•74 views

CVE-2018-4153

An injection issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.

5.9CVSS6.6AI score0.00274EPSS

CVE•added 2019/04/03 6:29 p.m.•74 views

CVE-2018-4259

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

10CVSS7AI score0.00632EPSS

CVE•added 2019/03/05 4:29 p.m.•74 views

CVE-2019-6231

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory.

5.5CVSS5AI score0.00359EPSS

CVE•added 2019/12/18 6:15 p.m.•74 views

CVE-2019-8502

An API issue existed in the handling of dictation requests. This issue was addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to initiate a Dictation request without user authorization.

4.3CVSS4.3AI score0.00319EPSS

CVE•added 2019/12/18 6:15 p.m.•74 views

CVE-2019-8598

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to read restricted memory.

5.5CVSS5.6AI score0.0023EPSS

CVE•added 2019/12/18 6:15 p.m.•74 views

CVE-2019-8748

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges.

7.8CVSS8.2AI score0.00131EPSS

CVE•added 2019/04/03 6:29 p.m.•73 views

CVE-2018-4334

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.

9.3CVSS7.6AI score0.00149EPSS

CVE•added 2019/12/18 6:15 p.m.•73 views

CVE-2019-8705

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15, tvOS 13. Processing a maliciously crafted movie may result in the disclosure of process memory.

5.5CVSS6.2AI score0.0021EPSS

CVE•added 2019/12/18 6:15 p.m.•72 views

CVE-2019-8516

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service.

7.5CVSS6.8AI score0.00642EPSS

CVE•added 2019/12/18 6:15 p.m.•72 views

CVE-2019-8527

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

9.4CVSS8AI score0.00967EPSS

CVE•added 2019/12/18 6:15 p.m.•72 views

CVE-2019-8789

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Parsing a maliciously crafted iBooks file may lead to disclosure of user information.

5.5CVSS5.3AI score0.00255EPSS

CVE•added 2019/04/03 6:29 p.m.•71 views

CVE-2018-4402

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

9.3CVSS7.2AI score0.00171EPSS

CVE•added 2019/12/18 6:15 p.m.•71 views

CVE-2019-8546

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A local user may be able to view sensitive user information.

5.5CVSS5.4AI score0.00148EPSS

CVE•added 2019/12/18 6:15 p.m.•71 views

CVE-2019-8549

Multiple input validation issues existed in MIG generated code. These issues were addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to execute arbitrary code with system privileges.

9.3CVSS7.9AI score0.00456EPSS

CVE•added 2019/04/03 6:29 p.m.•70 views

CVE-2018-4288

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

10CVSS7AI score0.00717EPSS

CVE•added 2019/04/03 6:29 p.m.•70 views

CVE-2018-4308

An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS6.2AI score0.00197EPSS

CVE•added 2019/04/03 6:29 p.m.•70 views

CVE-2018-4351

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS6.3AI score0.00226EPSS

CVE•added 2019/04/03 6:29 p.m.•70 views

CVE-2018-4411

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.

7.8CVSS7.2AI score0.00452EPSS

CVE•added 2019/03/05 4:29 p.m.•70 views

CVE-2019-6230

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A malicious application may be able to break out of its sandbox.

8.6CVSS6.8AI score0.00352EPSS

CVE•added 2019/12/18 6:15 p.m.•70 views

CVE-2019-8517

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted font may result in the disclosure of process memory.

6.5CVSS6.1AI score0.00478EPSS

CVE•added 2019/12/18 6:15 p.m.•70 views

CVE-2019-8540

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.

7.1CVSS5.4AI score0.0085EPSS

CVE•added 2019/12/18 6:15 p.m.•70 views

CVE-2019-8545

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to cause unexpected system termination or read kernel memory.

7.1CVSS6.5AI score0.00171EPSS

CVE•added 2019/12/18 6:15 p.m.•70 views

CVE-2019-8568

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system.

5.5CVSS5.4AI score0.00063EPSS

CVE•added 2019/12/18 6:15 p.m.•70 views

CVE-2019-8657

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. Parsing a maliciously crafted office document may lead to an unexpected application termination or arbitrary code execution.

8.8CVSS7.8AI score0.00645EPSS

CVE•added 2019/12/18 6:15 p.m.•70 views

CVE-2019-8794

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to read restricted memory.

5.5CVSS5.3AI score0.00359EPSS

CVE•added 2019/04/03 6:29 p.m.•69 views

CVE-2018-4348

A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS6.2AI score0.00107EPSS

CVE•added 2019/04/03 6:29 p.m.•69 views

CVE-2018-4396

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS6.3AI score0.00197EPSS

CVE•added 2019/04/03 6:29 p.m.•69 views

CVE-2018-4415

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

9.3CVSS6.9AI score0.00288EPSS

CVE•added 2019/03/05 4:29 p.m.•69 views

CVE-2019-6202

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges.

7.8CVSS6.3AI score0.00259EPSS

CVE•added 2019/12/18 6:15 p.m.•69 views

CVE-2019-8504

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A local user may be able to read kernel memory.

5.5CVSS5.2AI score0.00112EPSS

CVE•added 2019/04/03 6:29 p.m.•68 views

CVE-2018-4342

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.1.

5.5CVSS5.8AI score0.00055EPSS

CVE•added 2019/04/03 6:29 p.m.•68 views

CVE-2018-4424

A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.

9.3CVSS7.5AI score0.00157EPSS

CVE•added 2019/12/18 6:15 p.m.•68 views

CVE-2019-8511

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A malicious application may be able to elevate privileges.

7.8CVSS7.2AI score0.00513EPSS

CVE•added 2019/12/18 6:15 p.m.•68 views

CVE-2019-8648

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

9.8CVSS8.3AI score0.01127EPSS

CVE•added 2019/04/03 6:29 p.m.•67 views

CVE-2018-4295

An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.

9.8CVSS7.2AI score0.00528EPSS

CVE•added 2019/03/05 4:29 p.m.•67 views

CVE-2019-6219

A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. Processing a maliciously crafted message may lead to a denial of service.

7.5CVSS6.9AI score0.01042EPSS

CVE•added 2019/12/18 6:15 p.m.•67 views

CVE-2019-8635

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.6AI score0.00119EPSS

CVE•added 2019/12/18 6:15 p.m.•67 views

CVE-2019-8781

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.5AI score0.15909EPSS

CVE•added 2019/04/03 6:29 p.m.•66 views

CVE-2018-4423

A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.

7.8CVSS6.8AI score0.00217EPSS

Total number of security vulnerabilities208