deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-8670
Published: 2019-12-18
Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6, Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/HT210348; https://support.apple.com/HT210355; https://support.apple.com/HT210348
CVE: CVE-2019-8671
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8672
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8673
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8674
Published: 2019-12-18
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210606; https://support.apple.com/HT210608
CVE: CVE-2019-8676
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8677
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8678
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8679
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8680
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8681
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8682
Published: 2019-12-18
Description: The issue was addressed with improved UI handling. This issue is fixed in iOS 12.4, watchOS 5.3. A user may inadvertently complete an in-app purchase while on the lock screen.
CVSS Score: 2.4 (LOW)
CWE: CWE-306
References: https://support.apple.com/HT210346; https://support.apple.com/HT210353; https://support.apple.com/HT210346
CVE: CVE-2019-8683
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8684
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8685
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8686
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8687
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8688
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8689
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8690
Published: 2019-12-18
Description: A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/HT210346; https://support.apple.com/HT210348; https://support.apple.com/HT210351
CVE: CVE-2019-8691
Published: 2019-12-18
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT210348; https://support.apple.com/HT210348
CVE: CVE-2019-8692
Published: 2019-12-18
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT210348; https://support.apple.com/HT210348
CVE: CVE-2019-8693
Published: 2019-12-18
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT210348; https://support.apple.com/HT210348
CVE: CVE-2019-8694
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210348; https://support.apple.com/HT210348
CVE: CVE-2019-8695
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210348; https://support.apple.com/HT210348
CVE: CVE-2019-8697
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210348; https://support.apple.com/HT210348
CVE: CVE-2019-8698
Published: 2019-12-18
Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to restrict access to websites.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://support.apple.com/HT210346; https://support.apple.com/HT210351; https://support.apple.com/HT210346
CVE: CVE-2019-8699
Published: 2019-12-18
Description: A logic issue existed in the handling of answering phone calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4. The initiator of a phone call may be able to cause the recipient to answer a simultaneous Walkie-Talkie connection.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/HT210346; https://support.apple.com/HT210346
CVE: CVE-2019-8701
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210634; https://support.apple.com/HT210634
CVE: CVE-2019-8704
Published: 2019-12-18
Description: An authentication issue was addressed with improved state management. This issue is fixed in tvOS 13. A local user may be able to leak sensitive user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://support.apple.com/HT210604; https://support.apple.com/HT210606; https://support.apple.com/HT210604
CVE: CVE-2019-8705
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15, tvOS 13. Processing a maliciously crafted movie may result in the disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/HT210634; https://support.apple.com/kb/HT210722; https://support.apple.com/HT210634
CVE: CVE-2019-8707
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210635; https://support.apple.com/HT210636
CVE: CVE-2019-8710
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210727; https://security.gentoo.org/glsa/202003-22
CVE: CVE-2019-8711
Published: 2019-12-18
Description: A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification previews may show on Bluetooth accessories even when previews are disabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/HT210606; https://support.apple.com/HT210606
CVE: CVE-2019-8717
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210634; https://support.apple.com/kb/HT210722; https://support.apple.com/HT210634
CVE: CVE-2019-8719
Published: 2019-12-18
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210635; https://support.apple.com/HT210636
CVE: CVE-2019-8721
Published: 2019-12-18
Description: Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT210609; https://support.apple.com/HT210609
CVE: CVE-2019-8722
Published: 2019-12-18
Description: Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT210609; https://support.apple.com/HT210609
CVE: CVE-2019-8723
Published: 2019-12-18
Description: Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT210609; https://support.apple.com/HT210609
CVE: CVE-2019-8724
Published: 2019-12-18
Description: Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT210609; https://support.apple.com/HT210609
CVE: CVE-2019-8725
Published: 2019-12-18
Description: The issue was addressed with improved handling of service worker lifetime. This issue is fixed in Safari 13.0.1. Service workers may leak private browsing history.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/HT210605; https://support.apple.com/HT210605
CVE: CVE-2019-8726
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210635; https://support.apple.com/HT210636
CVE: CVE-2019-8727
Published: 2019-12-18
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 13. Visiting a malicious website may lead to address bar spoofing.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/HT210606; https://support.apple.com/HT210606
CVE: CVE-2019-8730
Published: 2019-12-18
Description: The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed in macOS Catalina 10.15. A local user may be able to view a user’s locked notes.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-459
References: https://support.apple.com/HT210634; https://support.apple.com/HT210634
CVE: CVE-2019-8731
Published: 2019-12-18
Description: A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue is fixed in iOS 13. Processing a maliciously crafted file may disclose user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/HT210606; https://support.apple.com/HT210606
CVE: CVE-2019-8733
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210635; https://support.apple.com/HT210636
CVE: CVE-2019-8735
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210635; https://support.apple.com/HT210636
CVE: CVE-2019-8738
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210609; https://support.apple.com/HT210609
CVE: CVE-2019-8739
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210609; https://support.apple.com/HT210609
CVE: CVE-2019-8742
Published: 2019-12-18
Description: The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/HT210606; https://support.apple.com/HT210606
CVE: CVE-2019-8743
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210724; https://security.gentoo.org/glsa/202003-22
CVE: CVE-2019-8745
Published: 2019-12-18
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing a maliciously crafted text file may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT210634; https://support.apple.com/HT210635; https://support.apple.com/HT210636
CVE: CVE-2019-8747
Published: 2019-12-18
Description: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210724; https://support.apple.com/HT210724
CVE: CVE-2019-8748
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210634; https://support.apple.com/kb/HT210722; https://support.apple.com/HT210634
CVE: CVE-2019-8750
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Multiple issues in libxslt.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/HT210724; https://support.apple.com/HT210727; https://support.apple.com/HT210724