deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-8593
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210120; https://support.apple.com/HT210122
CVE: CVE-2019-8594
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8595
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8596
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8597
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-843
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8598
Published: 2019-12-18
Description: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/; https://support.apple.com/HT210118; https://support.apple.com/HT210119
CVE: CVE-2019-8599
Published: 2019-12-18
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access to an iOS device may be able to see the email address used for iTunes.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/HT210118; https://support.apple.com/HT210118
CVE: CVE-2019-8600
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-787
References: https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/; https://support.apple.com/HT210118; https://support.apple.com/HT210119
CVE: CVE-2019-8601
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8602
Published: 2019-12-18
Description: A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/; https://support.apple.com/HT210118; https://support.apple.com/HT210119
CVE: CVE-2019-8603
Published: 2019-12-18
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5. An application may be able to read restricted memory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8604
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8605
Published: 2019-12-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8606
Published: 2019-12-18
Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.5. A local user may be able to load unsigned kernel extensions.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8607
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8608
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-416, CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8609
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8610
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8611
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8613
Published: 2019-12-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://support.apple.com/HT210118; https://support.apple.com/HT210120; https://support.apple.com/HT210122
CVE: CVE-2019-8615
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8616
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8617
Published: 2019-12-18
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.3. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 9.6 (CRITICAL)
References: https://support.apple.com/HT210118; https://support.apple.com/HT210118
CVE: CVE-2019-8619
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8620
Published: 2019-12-18
Description: A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support.apple.com/HT210118; https://support.apple.com/HT210120; https://support.apple.com/HT210122
CVE: CVE-2019-8622
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8623
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8624
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 5.3. A remote attacker may be able to leak memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT210353; https://support.apple.com/HT210353
CVE: CVE-2019-8625
Published: 2019-12-18
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210635; https://support.apple.com/HT210636
CVE: CVE-2019-8626
Published: 2019-12-18
Description: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/HT210118; https://support.apple.com/HT210122; https://support.apple.com/HT210118
CVE: CVE-2019-8628
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8629
Published: 2019-12-18
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8630
Published: 2019-12-18
Description: The issue was addressed with improved UI handling. This issue is fixed in iOS 12.3. The lock screen may show a locked icon after unlocking.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/HT210118; https://support.apple.com/HT210118
CVE: CVE-2019-8632
Published: 2019-12-18
Description: Some analytics data was sent using HTTP rather than HTTPS. This was addressed by no longer sending this analytics data. This issue is fixed in Texture 5.11.10 for iOS, Texture 4.22.0.4 for Android. An attacker in a privileged network position may be able to intercept analytics data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://support.apple.com/HT210110; https://support.apple.com/HT210111; https://www.info-sec.ca/advisories/Texture.html
CVE: CVE-2019-8634
Published: 2019-12-18
Description: An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8635
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-787
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8637
Published: 2019-12-18
Description: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT210118; https://support.apple.com/HT210120; https://support.apple.com/HT210122
CVE: CVE-2019-8641
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved input validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://support.apple.com/HT210588; https://support.apple.com/HT210589; https://support.apple.com/HT210590
CVE: CVE-2019-8644
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8646
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to leak memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8647
Published: 2019-12-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://support.apple.com/HT210346; https://support.apple.com/HT210351; https://support.apple.com/HT210353
CVE: CVE-2019-8648
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8649
Published: 2019-12-18
Description: A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8654
Published: 2019-12-18
Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/HT210605; https://support.apple.com/HT210605
CVE: CVE-2019-8657
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. Parsing a maliciously crafted office document may lead to an unexpected application termination or arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8658
Published: 2019-12-18
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8659
Published: 2019-12-18
Description: This issue was addressed with improved checks. This issue is fixed in watchOS 5.3. Users removed from an iMessage conversation may still be able to alter state.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/HT210353; https://support.apple.com/HT210353
CVE: CVE-2019-8660
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8661
Published: 2019-12-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://support.apple.com/HT210348; https://support.apple.com/HT210348
CVE: CVE-2019-8662
Published: 2019-12-18
Description: This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-502
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8663
Published: 2019-12-18
Description: This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6. A remote attacker may be able to leak memory.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210346
CVE: CVE-2019-8665
Published: 2019-12-18
Description: A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, watchOS 5.3. A remote attacker may cause an unexpected application termination.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT210346; https://support.apple.com/HT210353; https://support.apple.com/HT210346
CVE: CVE-2019-8666
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8667
Published: 2019-12-18
Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/HT210348; https://support.apple.com/HT210348
CVE: CVE-2019-8669
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351