|
211951
|
6.5 |
MEDIUM
Network
|
apple
|
safari
|
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing.
|
CWE-20
Improper Input Validation
|
CVE-2019-8654
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211952
|
6.1 |
MEDIUM
Network
|
apple
|
mac_os_x safari tvos iphone_os icloud itunes
|
A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1…
|
CWE-79
Cross-site Scripting
|
CVE-2019-8649
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211953
|
9.8 |
CRITICAL
Network
|
apple
|
mac_os_x tvos watchos iphone_os
|
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-8648
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211954
|
9.8 |
CRITICAL
Network
|
apple
|
tvos watchos iphone_os
|
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
|
CWE-416
Use After Free
|
CVE-2019-8647
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211955
|
7.5 |
HIGH
Network
|
apple
|
mac_os_x tvos watchos iphone_os
|
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to leak memory.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-8646
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211956
|
8.8 |
HIGH
Network
|
apple
|
mac_os_x safari tvos iphone_os icloud itunes
|
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for …
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2019-8644
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211957
|
9.8 |
CRITICAL
Network
|
apple
|
mac_os_x tvos watchos iphone_os
|
An out-of-bounds read was addressed with improved input validation.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-8641
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211958
|
7.8 |
HIGH
Local
|
apple
|
iphone_os tvos watchos
|
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges.
|
CWE-20
Improper Input Validation
|
CVE-2019-8637
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211959
|
7.8 |
HIGH
Local
|
apple
|
mac_os_x
|
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
|
CWE-787 CWE-415
Out-of-bounds Write Double Free
|
CVE-2019-8635
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211960
|
8.8 |
HIGH
Network
|
apple
|
mac_os_x
|
An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account.
|
CWE-287
Improper Authentication
|
CVE-2019-8634
|
2024-11-21 13:50 |
2019-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|