|
211381
|
4.3 |
MEDIUM
Network
|
apple
|
iphone_os ipados tvos safari itunes icloud
|
The HTTP referrer header may be used to leak browsing history. The issue was resolved by downgrading all third party referrers to their origin. This issue is fixed in Safari 13.0.3, iTunes 12.10.2 fo…
|
NVD-CWE-noinfo
|
CVE-2019-8827
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211382
|
8.8 |
HIGH
Network
|
apple
|
mac_os_x
|
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. Processing maliciously crafted web content may lead to arbitrary code execution.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-8826
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211383
|
8.8 |
HIGH
Network
|
apple
|
itunes icloud mac_os_x iphone_os
|
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 10.7, macOS Catalina 10.15.1, Security Update 2019-001,…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-8825
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211384
|
7.8 |
HIGH
Local
|
apple
|
mac_os_x
|
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. An application may be ab…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-8824
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211385
|
3.3 |
LOW
Local
|
apple
|
ipados iphone_os mac_os_x watchos tvos
|
A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6, iOS 13. A local app may be able to read a persistent a…
|
NVD-CWE-noinfo
|
CVE-2019-8809
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211386
|
2.4 |
LOW
Physics
|
apple
|
ipados iphone_os mac_os_x watchos tvos
|
This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximit…
|
NVD-CWE-noinfo
|
CVE-2019-8799
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211387
|
5.5 |
MEDIUM
Local
|
apple
|
swift
|
This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors…
|
CWE-922
Insecure Storage of Sensitive Information
|
CVE-2019-8790
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211388
|
5.5 |
MEDIUM
Local
|
apple
|
iphone_os tvos
|
The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13. A malicious application may be able to determine kernel memory layout.
|
NVD-CWE-noinfo
|
CVE-2019-8780
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211389
|
2.4 |
LOW
Physics
|
apple
|
mac_os_x
|
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High …
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-8777
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211390
|
7.8 |
HIGH
Local
|
apple
|
mac_os_x
|
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-8776
|
2024-11-21 13:50 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|