macOS

CVEs (3,298)

• CVE-2019-8828HigOct 27, 2020
  Apple Inc.

  tvOS
  risk 0.51cvss 7.8epss 0.01

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to…

• CVE-2019-8824HigOct 27, 2020
  Apple Inc.

  macOS Catalina
  risk 0.51cvss 7.8epss 0.01

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. An application may be able to execute arbitrary code with kernel privileges.

• CVE-2019-8776HigOct 27, 2020
  Apple Inc.

  macOS Catalina
  risk 0.51cvss 7.8epss 0.01

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.

• CVE-2019-8715HigOct 27, 2020
  Apple Inc.

  iOS
  risk 0.51cvss 7.8epss 0.01

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15, iOS 13. An application may be able to execute arbitrary code with system privileges.

• CVE-2019-8709HigOct 27, 2020
  Apple Inc.

  tvOS
  risk 0.51cvss 7.8epss 0.01

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iOS 13. An application may be able to execute arbitrary code…

• CVE-2019-8706HigOct 27, 2020
  Apple Inc.

  tvOS
  risk 0.51cvss 7.8epss 0.01

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6. Processing a maliciously crafted…

• CVE-2019-8592HigOct 27, 2020
  Apple Inc.

  tvOS
  risk 0.51cvss 7.8epss 0.01

  A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5, Security Update 2019-003…

• CVE-2019-8579HigOct 27, 2020
  Apple Inc.

  macOS Mojave
  risk 0.51cvss 7.8epss 0.00

  An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An application may be able to gain elevated privileges.

• CVE-2019-8539HigOct 27, 2020
  Apple Inc.

  macOS Mojave
  risk 0.51cvss 7.8epss 0.01

  A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. A malicious application may be able to execute arbitrary code with system privileges.

• CVE-2019-8509HigOct 27, 2020
  Apple Inc.

  macOS Catalina
  risk 0.51cvss 7.8epss 0.01

  This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A malicious application may be able to elevate privileges.

• CVE-2019-6238HigOct 27, 2020
  Apple Inc.

  macOS
  risk 0.51cvss 7.8epss 0.01

  A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. Processing a maliciously crafted package may…

• CVE-2018-4467HigOct 27, 2020
  Apple Inc.

  macOS
  risk 0.51cvss 7.8epss 0.01

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006…

• CVE-2018-4452HigOct 27, 2020
  Apple Inc.

  macOS
  risk 0.51cvss 7.8epss 0.01

  A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006…

• CVE-2018-4451HigOct 27, 2020
  Apple Inc.

  macOS Mojave
  risk 0.51cvss 7.8epss 0.01

  This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation.

• CVE-2020-9990HigOct 22, 2020
  Apple Inc.

  macOS Catalina
  risk 0.51cvss 7.8epss 0.00

  A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges.

• CVE-2020-9985HigOct 22, 2020
  Apple Inc.

  macOS
  risk 0.51cvss 7.8epss 0.01

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

• CVE-2020-9984HigOct 22, 2020
  Apple Inc.

  macOS
  risk 0.51cvss 7.8epss 0.01

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted…

• CVE-2020-9980HigOct 22, 2020
  Apple Inc.

  tvOS
  risk 0.51cvss 7.8epss 0.01

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted font file may lead to arbitrary code execution.

• CVE-2020-9940HigOct 22, 2020
  Apple Inc.

  tvOS
  risk 0.51cvss 7.8epss 0.01

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

• CVE-2020-9938HigOct 22, 2020
  Apple Inc.

  macOS
  risk 0.51cvss 7.8epss 0.01

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted…