Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.
CVEs:CVE-2019-8605
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously c...
CVEs:CVE-2019-8622
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously c...
CVEs:CVE-2019-8623
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8611
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.
CVEs:CVE-2019-8591
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously c...
CVEs:CVE-2019-8601
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. An application may be able to execute arbitrary code with system privileges.
CVEs:CVE-2019-8593
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arb...
CVEs:CVE-2019-8600
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.
CVEs:CVE-2019-8613
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated priv...
CVEs:CVE-2019-8577
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to elevate...
CVEs:CVE-2019-8602
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to read res...
CVEs:CVE-2019-8598
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.
CVEs:CVE-2019-8572
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| airport_base_station_firmware | affected | apple | — | — |
A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.
CVEs:CVE-2019-8578
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| airport_base_station_firmware | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8610
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. Processing a maliciously crafted movie file may lead to arbitrary code execution.
CVEs:CVE-2019-8585
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8597
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8615
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously c...
CVEs:CVE-2019-8583
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause a system denial of service.
CVEs:CVE-2019-8588
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| airport_base_station_firmware | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8596
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8609
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to leak memory.
CVEs:CVE-2019-8581
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| airport_base_station_firmware | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8571
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8584
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8586
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8587
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8594
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8595
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8619
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8628
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address.
CVEs:CVE-2019-8620
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web cont...
CVEs:CVE-2019-8608
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web c...
CVEs:CVE-2019-8607
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| safari | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iCloud for Windows 7.12, tvOS 12.3, iTunes 12.9.5 for Windows, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12...
CVEs:CVE-2019-8582
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| icloud | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with kernel privileges.
CVEs:CVE-2019-8590
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to execute arbitrary code with system privileges.
CVEs:CVE-2019-8574
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
CVEs:CVE-2019-8629
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5...
CVEs:CVE-2019-8592
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may not delete all user information.
CVEs:CVE-2019-8575
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| airport_base_station_firmware | affected | apple | — | — |
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5. An application may be able to read restricted memory.
CVEs:CVE-2019-8603
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial o...
CVEs:CVE-2019-7291
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| airport_base_station_firmware | affected | apple | — | — |
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.3. A sandboxed process may be able to circumvent sandbox restrictions.
CVEs:CVE-2019-8617
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service.
CVEs:CVE-2019-8626
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| watchos | affected | apple | — | — |
Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted.
CVEs:CVE-2019-8580
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| airport_base_station_firmware | affected | apple | — | — |
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges.
CVEs:CVE-2019-8637
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position can modify driver state.
CVEs:CVE-2019-8564
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account.
CVEs:CVE-2019-8634
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to read restricted memory.
CVEs:CVE-2019-8560
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.5. A malicious application may bypass Gatekeeper checks.
CVEs:CVE-2019-8589
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
CVEs:CVE-2019-8635
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
CVEs:CVE-2019-8604
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
CVEs:CVE-2019-8616
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Secur...
CVEs:CVE-2019-8569
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts o...
CVEs:CVE-2019-8568
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to cause unexpected system termination or read kernel memory.
CVEs:CVE-2019-8576
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| tvos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access to an iOS device may be able to see the email address used for iTunes.
CVEs:CVE-2019-8599
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
The issue was addressed with improved UI handling. This issue is fixed in iOS 12.3. The lock screen may show a locked icon after unlocking.
CVEs:CVE-2019-8630
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.5. A local user may be able to load unsigned kernel extensions.
CVEs:CVE-2019-8606
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.